Loading story…
ISMG editors discussed the persistent myth that small and mid-sized businesses are not cyber targets, the high failure rate of enterprise AI projects, and emerging fraud risks from agentic commerce. SMBs' belief in their immunity leads to weak defenses, making them attractive to attackers. The panel also noted that most enterprise AI projects stall in pilot phases, and agentic AI-driven transactions introduce new fraud and dispute challenges for payment providers.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
1 event from the most recent confirmed update back to the earliest known activity.
Initial story creation
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Small and medium-sized businesses (SMBs) are increasingly targeted by cybercriminals due to their typically limited security resources and lack of mature controls. Attackers exploit the ability to scale low-effort techniques, such as phishing and credential-stuffing, across thousands of similar SMB environments. Recent data highlights that SMBs are targeted nearly four times more than large organizations, with reported cybercrime losses reaching $16.6 billion in 2024. Business email compromise (BEC) and phishing remain the most costly threats, and basic security hygiene—such as strong identity management, multi-factor authentication (MFA), and regular validation—are critical for reducing risk. Adopting a strategic, risk-based approach to cybersecurity is essential for SMBs. The CISSP (Certified Information Systems Security Professional) mindset emphasizes identifying key digital assets, conducting lightweight risk assessments, and prioritizing controls that offer the most protection with minimal complexity. Security decisions should be directly linked to business objectives, and even organizations with small IT teams can implement enterprise-level strategies like layered defenses, zero trust principles, and clear security ownership. By focusing on business-driven security and right-sized defense-in-depth, SMBs can transform cybersecurity from a technical hurdle into a business enabler.
Jul 12, 2026
Ransomware groups are rapidly evolving their attack methods, increasingly leveraging zero-day vulnerabilities, supply chain compromises, credential harvesting, and exploiting overlooked weaknesses during mergers and acquisitions to maximize the scale, speed, and profitability of their operations. Security experts highlight that these innovations are making ransomware campaigns more difficult to detect and defend against, posing heightened risks for organizations across sectors. Additionally, small- to medium-sized businesses are adopting artificial intelligence technologies at a faster pace than large enterprises, but often lack the necessary governance, staffing, and security oversight. This growing gap in AI readiness exposes SMBs to new threats, as they may not have the resources or expertise to manage the associated risks effectively. The discussion also touched on regulatory developments, including the State of Texas withdrawing its challenge to the HIPAA Privacy Rule and the implications for healthcare data protection.
Jun 29, 2026
Artificial intelligence is fundamentally transforming the landscape of cyberattacks, with small businesses facing heightened risks from increasingly sophisticated ransomware campaigns. Attackers are leveraging AI to automate reconnaissance, scanning networks for vulnerabilities and identifying high-value targets such as financial records and client databases. This automation allows threat actors to rapidly pinpoint weaknesses in small business environments, which often suffer from unpatched software and outdated infrastructure due to budget constraints. AI-powered tools can generate highly convincing phishing emails by analyzing employee communication patterns, making it easier for attackers to compromise accounts and gain initial access. Once inside, some ransomware variants use machine learning to adapt their encryption methods and evade detection, dynamically disabling security processes to maximize impact. The shift from broad, indiscriminate attacks to highly targeted 'surgical strikes' is enabled by AI's ability to profile organizations using publicly available data, including social media, GitHub repositories, and job postings. This level of targeting, once reserved for nation-state actors, is now accessible to a wider range of cybercriminals, allowing them to prioritize victims based on the likelihood of compromise and potential value. Small businesses are particularly vulnerable because they often lack dedicated IT or security staff and rely on basic endpoint protection, leaving them exposed to these advanced threats. The speed and scale of AI-driven attacks mean that what previously required months of manual effort can now be accomplished in hours, increasing the frequency and severity of incidents. Employee security awareness remains a critical weakness, as a single compromised account can provide attackers with full access to networked systems. The evolution of ransomware in the AI era underscores the urgent need for small businesses to implement practical defenses, such as regular software updates, strong password policies, and ongoing security training. As attackers continue to innovate, defenders must adapt by adopting AI-driven defense tools and threat intelligence to keep pace. The growing sophistication of AI-enabled cyberattacks highlights the importance of proactive risk management and investment in cybersecurity, even for organizations with limited resources. Failure to address these challenges can result in significant financial losses, reputational damage, and operational disruption. The threat landscape in 2025 is defined by the convergence of automation, machine learning, and targeted attack strategies, making cybersecurity a top priority for small businesses. Organizations must recognize that traditional security measures are no longer sufficient in the face of AI-enhanced adversaries. By understanding the evolving tactics of ransomware operators and investing in both technology and human-centric defenses, small businesses can better protect themselves against the escalating threat of AI-driven cybercrime.
Jun 29, 2026