[REVISION HISTORY]

Escalating global cybersecurity threats and risks for SMEs

Updated 21 times since CLSTR started tracking revisions of this situation.

What changed

2026-10-27 05:11 UTC → 2026-10-27 05:46 UTC · added ~~removed~~

Cybersecurity threats to small and medium-sized enterprises (SMEs) continue to escalate globally. While a Clusit 2025 report previously noted a 42% increase in attacks, recent data from Kaspersky indicates that 86% of SMEs worldwide faced at least one cybersecurity incident in the past year. In Europe, this figure has risen to approximately 90% of surveyed SMEs, with incidents causing deep operational disruptions and reputational damage. Regional vulnerabilities persist. In the UK, the ESET 2026 SMB Cyber Risk Report found that 49% of UK SMBs experienced a security incident in the past year. In South Africa, Kaspersky research indicates 78% of SMEs experienced at least one incident. In the US, Hiscox data shows 56% of small businesses experienced at least one attack between mid-2024 and mid-2025. In Mexico, the PyMEs Ciberseguras initiative was launched by Mastercard and the Mexican Association of the IT Industry to provide security tools and training to 500,000 enterprises. Threat vectors are increasingly sophisticated. Beyond ransomware and social engineering, new technical threats include SMTP smuggling techniques and malware targeting the software supply ~~chain, such as the Shai-Hulud malware compromising~~ chain. Recent breaches have highlighted these vulnerabilities, including an attack on WordPress backup developer TeamUpdraft and the ~~Tensorlake npm SDK. Evolving social engineering tactics like ‘ClickFix’ also hide~~ open-source AI gateway LiteLLM, where attackers used stolen developer tokens to publish malicious ~~scripts within browser-cached images.~~ packages designed to steal cloud credentials. Additionally, Japanese cloud hosting provider Onamae Desktop Cloud confirmed a breach affecting more than 26,000 servers, and the State Bank of India disclosed a breach involving nearly 3,900 customer records. Economic challenges and misconceptions remain significant. Research from GlobalData indicates that approximately 30% of uninsured SMEs dismiss the risk of ~~cyberattacks, with 27% of those without insurance believing they are unlikely to be targeted.~~ cyberattacks. The rise of generative AI has further shifted the landscape, allowing criminals to automate and scale phishing ~~attacks. This has contributed to a rise in business email compromise claims, which increased by approximately 30% in the second half of 2025 according to insurer Coalition. To manage~~ attacks and use AI-enabled antidetect browsers for large-scale influence operations and financial ~~exposure, some owners are utilizing Section 831(b) micro-captive plans to self-insure against digital risks.~~ fraud.

Versions

Only revisions since CLSTR began indexing content versions appear here. Select a version to see what changed compared to the one before it.