“As cyber threats continue to evolve across Latin America and the Caribbean, the role of journalists in shaping public understanding of cyber incidents has become increasingly significant. Cyberattacks no longer affect only technical systems, but also, they disrupt essential public services, impact citizens’ daily lives and influence trust in public institutions. With this training, we at LAC4 sought to strengthen the capacity of media to report responsibly and accurately on cyber issues to support well-informed, resilient and digitally aware societies.” – César Moliné, LAC4 Regional Manager.   

“I would like to thank everyone for their participation. Initiatives like this are key to highlighting the importance of the role of the media in prevention and awareness-raising in cybersecurity and information security, as well as the impact they have on strengthening the digital maturity of organizations, companies, and individuals.” – María Eugenia Corti, Director of Information Security at AGESIC. 

“For the European Union, combating Foreign Information Manipulation and Interference (FIMI) is a fundamental pillar in protecting democracy, European values, and the integrity of the information space. In a context of growing and increasingly sophisticated digital threats, the media plays an essential role in countering disinformation, contextualizing risks, and strengthening public trust. In this regard, supporting the training of journalists in cybersecurity and cybercrime is key to promoting more informed, resilient societies that are better prepared to face the challenges of the digital environment.” - Jan Dzięciołowski, Deputy Head of Mission of the European Union Delegation in Uruguay.    

Analysing Cybersecurity Landscape: from Technical Systems to Societal Impact 

The training began with an in-depth analysis of the current cybersecurity landscape and the key terminology that shapes public debate. Participants explored how cyber incidents have evolved from isolated technical breaches into complex, coordinated operations that often combine disruption, reputational damage and psychological pressure. Understanding this shift is essential for accurate reporting and contextual analysis. 

Drawing from the regional examples, instructors explained how cyberattacks can directly affect citizens. Large scale cyberattacks have demonstrated how digital disruptions to government systems can interrupt healthcare services, social security payments and public administration. The cases underlined that cybersecurity is fundamentally about safeguarding people and essential services in addition to protecting infrastructure. By examining these developments, participants strengthened their ability to interpret cyber incidents beyond technical details. Clear understanding of terminology, threat actors and operational objectives provides journalists with the tools to communicate complex issues responsibly and proportionately. 

Investigative Journalism Practices for Cybercrime Coverage 

Instructors explained how investigative journalism plays a crucial role in uncovering cybercrime and holding institutions accountable. However, modern cyberattacks are often designed to attract attention and exploit media visibility as part of their strategy. Effective cybersecurity reporting requires understanding attacker motivations and participants examined how journalists can maintain investigative rigor while avoiding unintended amplification of attacker narratives. 

Participants also examined the risk of becoming involuntary amplifiers of malicious narratives. Cybercriminal groups may seek media visibility, exaggerate impact or directly contact journalists to shape coverage. Responsible investigative practice requires verifying claims, distinguishing confirmed facts from attacker messaging and avoiding sensational framing. Agility must not come at the expense of rigor; proportional and contextual reporting strengthens public trust and resilience. 

Legal and Ethical Considerations in Cybercrime Reporting 

Covering cyber incidents requires careful navigation of legal and ethical boundaries and considerations. Journalists frequently encounter sensitive personal data, confidential information or claims regarding the origin of attacks that may have diplomatic implications. The training addressed how to manage these challenges responsibly while protecting sources and victims. 

Attribution was identified as particularly sensitive; technical indicators alone do not constitute state responsibility, and premature conclusions may carry diplomatic consequences. Consulting with technical experts and legal advisors before publication is essential. 

The Future of Cybersecurity Journalism: Artificial Intelligence, Hybrid Threats and Digital Security 

Looking ahead, participants explored how emerging technologies are reshaping both cyber threats and journalism. Artificial intelligence is already being used offensively to generate personalised phishing, automate vulnerability discovery and create adaptive malware. Deepfakes and AI-generated audiovisual manipulation pose growing risks to media credibility and electoral integrity. Journalists must therefore strengthen technical literacy and verification capabilities to operate in an increasingly synthetic information environment. 

The session also addressed hybrid threats, where cyberattacks are combined with disinformation campaigns, economic pressure and strategic narratives. In such contexts, journalists themselves may become targets of phishing, account compromise or reputational attacks. Future competencies for cybersecurity journalists include systemic thinking, geopolitical awareness, ethical data management and strong personal digital security practices. 

Moreover, journalists investigating cybercrime operate in hostile digital environments and are potential targets of retaliation. Digital security is an integral part of professional responsibility, as protecting information means protecting credibility and sources. 

Participants reviewed core principles including minimising exposure, encrypting devices, activating multi-factor authentication, separating professional and personal accounts, securing communications and preparing response plans in case of intrusion. Realistic case scenarios such as targeted phishing following investigative reporting or deepfake videos aimed at discrediting journalists illustrated the importance of verification, cautious response and coordination with newsroom technical teams. Preparation, rather than reaction, was emphasised as the cornerstone of resilience. 

Journalism as a Pillar of Cyber Resilience 

Instructors explained that journalism is a strategic actor within the cybersecurity ecosystem. Responsible reporting can reduce panic, counter disinformation, strengthen accountability and support national resilience. On contrary, unverified amplification can unintentionally advance the objectives of malicious actors. 

By fostering constructive cooperation between journalists and cybersecurity institutions while fully respecting editorial independence countries in Latin America and the Caribbean can strengthen both digital security and public trust. In a threat landscape defined not only by technology but by narratives and perception, resilient journalism is a strategic necessity. 

Photos: https://www.flickr.com/photos/eucybernet/albums/72177720332289927