Loading story…
Small and medium-sized businesses (SMBs) are increasingly targeted by cybercriminals due to their typically limited security resources and lack of mature controls. Attackers exploit the ability to scale low-effort techniques, such as phishing and credential-stuffing, across thousands of similar SMB environments. Recent data highlights that SMBs are targeted nearly four times more than large organizations, with reported cybercrime losses reaching $16.6 billion in 2024. Business email compromise (BEC) and phishing remain the most costly threats, and basic security hygiene—such as strong identity management, multi-factor authentication (MFA), and regular validation—are critical for reducing risk.
Adopting a strategic, risk-based approach to cybersecurity is essential for SMBs. The CISSP (Certified Information Systems Security Professional) mindset emphasizes identifying key digital assets, conducting lightweight risk assessments, and prioritizing controls that offer the most protection with minimal complexity. Security decisions should be directly linked to business objectives, and even organizations with small IT teams can implement enterprise-level strategies like layered defenses, zero trust principles, and clear security ownership. By focusing on business-driven security and right-sized defense-in-depth, SMBs can transform cybersecurity from a technical hurdle into a business enabler.
Get the infrastructure and lures behind it.
1 event from the most recent confirmed update back to the earliest known activity.
Initial story creation
Get the infrastructure, lures, and IOCs behind this campaign, ready to push into your email and identity stack.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Cybersecurity threats in 2025 have evolved, with attackers increasingly targeting small and medium-sized businesses (SMBs) due to improved defenses and ransom resistance among larger enterprises. Research highlights that four in five SMBs have suffered recent data breaches, with attackers leveraging the relative lack of resources and security maturity in these organizations. Ransomware remains a significant threat, with 83% of successful attacks compromising identity infrastructure such as Active Directory, and most incidents occurring during periods of organizational distraction, such as holidays or major corporate events. The holiday shopping season also presents heightened risks, as cybercriminals exploit increased online transactions, new account creation, and gift card exchanges to target both consumers and retailers. Systemic risks are amplified by the widespread outsourcing of cybersecurity functions, where a single compromised vendor can cascade risk across hundreds of organizations, as seen in high-profile supply chain breaches. The looming threat of quantum computing is also prompting urgent calls for organizations to begin migrating to post-quantum cryptography, as nation-state actors are already harvesting encrypted data for future decryption. These trends underscore the need for proactive, resilient security strategies, robust identity infrastructure protection, and a forward-looking approach to cryptographic agility to address both current and emerging threats.
Jun 29, 2026
Organizations are increasingly challenged by the rapid evolution of technology and the corresponding rise in cybercrime, with global costs escalating by nearly 20% annually. Many businesses, particularly small to mid-sized enterprises, struggle to scale their cybersecurity defenses in line with these growing threats. Security experts emphasize that embedding cybersecurity into business strategy, culture, and daily operations is essential for effective risk management and cost control. Rather than treating security as a last-minute addition or a cost center, organizations are encouraged to view it as a value driver that can accelerate time to market and reduce operational friction. Sean D. Mack, a seasoned technology leader and former CISO, advocates for aligning security initiatives with top business goals and integrating them into every facet of the organization. He highlights the importance of fostering a proactive security culture, where teams are trained to anticipate risks and contribute to long-term risk reduction. The use of fractional CISOs is presented as a cost-effective way for organizations to scale their security leadership without incurring the expense of a full-time executive. In parallel, businesses face mounting IT complexity as they rapidly adopt new technologies, leading to overlapping networks, data silos, and tool sprawl. This complexity often stems from hasty decisions made to meet business demands, resulting in systems that are difficult to manage and secure. Common triggers for this complexity include rapid growth, tool overload, disconnected teams, compliance pressures, and the coexistence of legacy and modern systems. Experts argue that clarity and structured decision-making are crucial to overcoming these challenges, advocating for focused, organized, and well-directed security strategies. By addressing the root causes of IT complexity and embedding security into the organizational fabric, businesses can transform security from a perceived barrier into a true enabler of growth and innovation. This approach not only reduces long-term costs but also positions organizations to respond more effectively to evolving cyber threats. Ultimately, the integration of security strategy with business objectives and IT architecture is seen as the key to sustainable risk management and operational excellence. Organizations that succeed in this integration are better equipped to navigate regulatory changes, technological advancements, and the ever-present threat landscape. The shift from reactive to proactive security, supported by expert guidance and clear communication across teams, is essential for maintaining resilience in a complex digital environment. As technology continues to advance, the ability to simplify and align security with business needs will be a defining factor in organizational success.
Jul 12, 2026
Organizations worldwide are facing an evolving threat landscape, with cyber adversaries leveraging artificial intelligence and automation to increase the speed and scale of attacks. Large enterprises have made significant investments in cybersecurity, deploying advanced solutions and dedicated personnel, while small and medium-sized businesses (SMBs) often struggle to keep pace due to limited resources. This disparity has led to a widening gap in cyber-resilience, making SMBs particularly vulnerable to cyber threats. Security hardening has emerged as a critical strategy for organizations, especially those with constrained budgets, to reduce their attack surface by properly configuring systems and networks. Essential measures include enforcing strong authentication and authorization policies, implementing strict password requirements, and minimizing unnecessary services and open ports. Meanwhile, the concept of cyber resilience has shifted from merely withstanding attacks to ensuring rapid recovery and continuity of operations amid persistent, disruptive threats. Boardrooms are increasingly focused on questions of recovery and service resumption, driven by new regulations such as NIS2 and the UK Cybersecurity and Resilience Bill. Research indicates that 86% of recent cyber incidents involve deliberate attempts to disrupt core operations, with attackers able to exfiltrate data in under an hour in many cases. The proliferation of nearly 9 million new threats daily has compressed defenders’ response windows from days to minutes, challenging traditional security postures. To address these challenges, organizations are urged to adopt a new defensive playbook that leverages AI for both detection and resilience, while also fostering collaboration across IT and OT teams. International standards like IEC 62443 and ISO/IEC 27001 provide frameworks for aligning security practices and managing third-party risks. Comprehensive asset inventories and software bills of materials are recommended to maintain an accurate view of operational technology (OT) environments, enabling more effective risk assessments and prioritization of critical systems. Joint guidance from agencies such as CISA and the UK NCSC emphasizes the importance of architectural controls and cross-team coordination to secure OT systems. Ultimately, a combination of security hardening, regulatory compliance, and adaptive resilience strategies is essential for organizations to withstand and recover from the relentless pace of modern cyber threats.
Jun 29, 2026