[CLSTR]
< Back to situations

Monitor this situation.

[SITUATION] · [ACTIVE] · [TECHNOLOGY]

20 clusters · 86 sources · 75 days · First seen · Last updated

Escalating global cybersecurity threats and risks for SMEs

Overview

Cybersecurity threats to small and medium-sized enterprises (SMEs) continue to escalate globally. While a Clusit 2025 report previously noted a 42% increase in attacks, recent data from Kaspersky indicates that 86% of SMEs worldwide faced at least one cybersecurity incident in the past year. In Europe, this figure has risen to approximately 90% of surveyed SMEs, with incidents causing deep operational disruptions and reputational damage.

Regional vulnerabilities persist. In the UK, the ESET 2026 SMB Cyber Risk Report found that 49% of UK SMBs experienced a security incident in the past year. In South Africa, Kaspersky research indicates 78% of SMEs experienced at least one incident. In the US, Hiscox data shows 56% of small businesses experienced at least one attack between mid-2024 and mid-2025. In Mexico, the PyMEs Ciberseguras initiative was launched by Mastercard and the Mexican Association of the IT Industry to provide security tools and training to 500,000 enterprises.

Threat vectors are increasingly sophisticated. Beyond ransomware and social engineering, new technical threats include SMTP smuggling techniques and malware targeting the software supply chain. Recent breaches have highlighted these vulnerabilities, including an attack on WordPress backup developer TeamUpdraft and the open-source AI gateway LiteLLM, where attackers used stolen developer tokens to publish malicious packages designed to steal cloud credentials. Additionally, Japanese cloud hosting provider Onamae Desktop Cloud confirmed a breach affecting more than 26,000 servers, and the State Bank of India disclosed a breach involving nearly 3,900 customer records.

Economic challenges and misconceptions remain significant. Research from GlobalData indicates that approximately 30% of uninsured SMEs dismiss the risk of cyberattacks. The rise of generative AI has further shifted the landscape, allowing criminals to automate and scale phishing attacks and use AI-enabled antidetect browsers for large-scale influence operations and financial fraud.

Entities

Kaspersky · Verizon · IBM · Europe · Apple

Claims

What the coverage asserts, and how many sources carry each claim.

Timeline

  1. [TECHNOLOGY] 9 sources
    Cybersecurity threats target cloud providers, banks, and small businesses

    Major cyberattacks have hit Onamae Desktop Cloud, State Bank of India, and LiteLLM, while rising AI-driven threats increasingly target vulnerable small businesses.

  2. [TECHNOLOGY] 3 sources
    Kaspersky reports 90% of European SMEs targeted by cyberattacks

    A Kaspersky study finds that 90% of European SMEs suffered cyber incidents in the last year, leading to data theft and operational disruptions.

  3. [TECHNOLOGY] 8 sources
    Cybersecurity and digital tools for SMEs and local businesses

    Experts discuss the necessity of cybersecurity for SMEs to combat AI-driven scams and the role of digital tools in promoting local businesses and tourism.

  4. [TECHNOLOGY] 2 sources
    Cybersecurity initiatives address business risk and industry integration

    Cybersecurity is shifting from a technical IT concern to a core business leadership priority, supported by new initiatives in Canada to connect startups with SMEs.

  5. [TECHNOLOGY] 2 sources
    Small businesses face high cybersecurity risks despite low-cost defense options

    Small businesses face four times more breaches than large firms, yet many skip low-cost defenses like multi-factor authentication despite the high risk of cyber attacks.

  6. [TECHNOLOGY] 5 sources
    Cybersecurity: Protecting mobile banking and SME digital assets

    Cybersecurity experts and organizations like Mastercard are promoting digital protection measures for individuals and SMEs, focusing on mobile banking security and remote device management.

  7. [TECHNOLOGY] 2 sources
    Small businesses face rising cyber threats and ransomware

    Verizon data shows small and medium enterprises are breached four times more often than large firms, with 88% of incidents involving ransomware and many utilizing stolen credentials.

  8. [TECHNOLOGY] 4 sources
    Cybersecurity challenges for SMEs and ROI complexities

    SMEs and security leaders face challenges in defining essential cybersecurity foundations and justifying ROI amidst rising threats and the complexities introduced by artificial intelligence.

  9. [TECHNOLOGY] 8 sources
    Cybersecurity risks rise for small and medium enterprises

    SMEs face rising cyber risks due to limited security resources, with 78% of South African small businesses reporting incidents. Experts warn that cloud storage alone is not a substitute for a formal disaster-re

  10. [TECHNOLOGY] 3 sources
    Cybersecurity risks rise for SMEs due to human error and remote work

    Cybersecurity threats for SMEs are rising, with human error contributing to 62% of breaches. Remote work and unsecured networks increase risks, while the average cost of a data breach has reached $4.99 million.

  11. [TECHNOLOGY] 3 sources
    UK small businesses face rising AI-driven cybersecurity threats

    Nearly half of UK small and medium businesses experienced a cyberattack in the last year, with experts warning that AI-powered malware and phishing pose growing risks.

  12. [TECHNOLOGY] 8 sources
    Cybercrime threats rise for businesses and retailers in Europe and Switzerland

    Cybercrime is rising, with 97 percent of European retailers reporting incidents like phishing and espionage. Experts recommend technical safeguards and increased security budgets to protect data.

  13. [TECHNOLOGY] 6 sources
    Cyber attacks rise among small businesses and property firms

    Cyber attacks are rising among small businesses in the UK and Germany, with property firms increasingly targeted due to the sensitive personal and financial data they hold.

  14. [TECHNOLOGY] 6 sources
    Cybersecurity threats rise for SMEs and AI systems

    SMEs face rising cyber threats, with 86% reporting incidents. Recent attacks include credential theft in Colombia and new AI-targeted prompt injection techniques designed to deceive security models.

  15. [TECHNOLOGY] 2 sources
    Cybersecurity studies reveal gaps in organizational preparedness and rising attack rates

    Studies show Romanian companies often lack tested incident response plans despite having technical tools, while 86% of SMEs globally report experiencing at least one cyberattack annually.

  16. [TECHNOLOGY] 4 sources
    Cybersecurity challenges rise for SMEs amid new EU regulations

    Rising cyberattacks and new EU regulations are driving initiatives like the APPtake project to help SMEs integrate DevSecOps, while human error remains a primary vulnerability in digital security.

  17. [TECHNOLOGY] 2 sources
    Kaspersky warns of rising cyber threats against SMEs and parked domains

    Kaspersky reports rising cyber threats against SMEs in the META region and warns that scammers are using unused “parked domains” to steal sensitive user data and track devices.

  18. [TECHNOLOGY] 4 sources
    Cybersecurity threats rise for SMBs in META region

    Cyberattacks are rising among SMBs in the META region, with 82% of firms reporting incidents. Threats include increased password-stealing malware, phishing, and software vulnerability exploitation.

  19. [TECHNOLOGY] 4 sources
    SMEs face rising cybersecurity threats and high incident rates

    SMEs face rising cyber threats, with 86% reporting incidents last year. Key risks include phishing and software vulnerabilities, necessitating multi-factor authentication and regular backups.

  20. [TECHNOLOGY] 2 sources
    Cybersecurity fundamentals: encryption protocols and employee training

    Cybersecurity relies on technical encryption like SSL/TLS certificates to protect data and Security Awareness Training (SAT) to mitigate human error and phishing risks within organizations.

Sources

adn-mundo.com · betakit.com · bizcommunity.com · biztechmagazine.com · blogs.iuvotech.com · brainstorm.itweb.co.za · cefriel.it · cittadellaspezia.com · cl.sportal.bg · cronicavasca.elespanol.com · davfi.fr · diariodelsur.com.co · digitalic.it · donanimhaber.net.tr · drweb.de · dynamicbusiness.com · elfinanciero.com.mx · empresaexterior.com · empresariales.net · estrategia-sustentable.com.mx · europesays.com · experten.de · fakti.bg · financiarul.ro · galiciapress.es · gargalianoionline.gr · gazeteyenisoz.com · ghananewss.com · guananoticias.com · hasselwander.co.uk · igeekphone.com · ilcorrieredellasicurezza.it · impactoinformativo.com.ar · independent.co.uk · insuranceasia.com · it-online.co.za · itespresso.fr · itnow.connectab2b.com · journaldunet.com · kvia.com · leak.pt · legislation.gov.uk · leo.bo · logisticaprofesional.com · mayacomunicacion.com.mx · mezzogiornoitalia.it · moguldom.com · myjoyonline.com

This summary has been updated 21 times: see revision history