Small businesses create stronger defenses in threat landscape TechRadar Skip to main content TechRadar is supported by its audience. When you purchase through links on our site, we may earn an affiliate commission. Here's why you can trust us. Small businesses create stronger defenses in threat landscape By Keiron Holyome published 8 August 2022 SMBs of any size should prepare for security threats (Image credit: Shutterstock / vs148) Whilst cybercriminals are equipped with weaponized AI (opens in new tab), effective social manipulation techniques and sophisticated malware (opens in new tab) programs, the most dangerous aspect of it all is their persistence. In the last year, nearly 40% of businesses were hit by a cyberattack according to the UK Government's recent Cyber Security Breaches Survey. Furthermore, these were not one-off incidents but part of a series of attacks; the study showed that 31% of businesses estimated they were attacked at least once a week.About the author Keiron Holyome is Vice President for UKI, Middle East & Africa at BlackBerry (opens in new tab). BlackBerry's Threat Research team reported that small and mid-sized businesses (SMBs (opens in new tab)) are an increasingly the focus of cyber attacks, facing upward of 11 cyberthreats per device, per day – a proportion much higher than larger enterprises. For businesses with access to large amounts of funding, investing in sophisticated cyber defenses is - of course - an effective solution. State-of-the-art cybersecurity (opens in new tab) software and specialist skills and resources can bolster defenses - and quickly! Smaller businesses do not have as many options due to budgetary constraints. As a result, they are often at higher risk. .An attack can be deadly if it hits an SMB: the Ponemon Institute found that 60% of SMBs go out of business within six months of a cyberattack due to the extent of the reputational and financial damage. However, leaders in SMBs shouldn't lose heart. A solution is possible, and they really can achieve the same, sophisticated level of defense as organizations with significantly larger budgets. Here's how. In cybersecurity success is in the small details We recently saw the Marriott International Group suffer its third publicly acknowledged data (opens in new tab) breach in four years. The hotel chain disclosed the incident after a site DataBreaches.net reported that an unnamed threat actor claimed to have stolen 20 gigabytes of sensitive data. With huge cyberattacks littering the news cycle, small businesses (opens in new tab) may anticipate complex attacks on their infrastructure. In our recent BlackBerry Threat Report 2022, we found that this is rarely the case. Older techniques, which can be less technical, are gaining popularity. Whilst this may be surprising, it is proving to be incredibly effective. The simple attacks are the most common. Utilizing older techniques such as phishing (opens in new tab) and watering hole attacks has been a popular choice due to the proliferation of digital channels such as SMS and smartphone apps (opens in new tab). BlackBerry's research discovered that out of the nearly 40% of UK businesses that identified an attack, the most common threat vector was phishing attempts (83%), while only one in five businesses identified the anticipated sophisticated techniques of malware and ransomware. Despite lack of sophistication, or the messy exits we're seeing many attacks display, threat actors are nonetheless successful. In many cases, threat actors left behind playbook text files containing IP addresses and more. Despite being less technically advanced, cyber criminals were able to infiltrate organizations' barriers due to small businesses still using older technologies and infrastructure for protection. If this continues, SMBs will remain the prime targets, even for the simplest of attacks, if they fail to bolster their defenses and tighten their security (opens in new tab). Last year, we witnessed a huge number of simple yet deadly attacks on SMB targets. So, how can we prepare ourselves and guard against this? The three avenues for protection people solutions and attitudes When making decisions about cybersecurity solutions, one of the first thing SMB leaders would consider is the cost. Whether that's employing an entire IT team or integrating cyber software across IT equipment, a significant cost would be involved. Luckily, this needn't be the case. It is entirely possible to outsource help and a level of protection that few organizations can otherwise afford on their own. There are three avenues small businesses should consider: 1. Attitudes No number of outsourced services or technologies can prevent human error. However, it's possible to reduce error through introducing positive security attitudes and cultures. A Zero Trust security model addresses this by assuming every user, endpoint, and network are potentially hostile. No user can access anything until they prove who they are, that their access is authorized, that they're not acting maliciously, and that the Wi-Fi or cellular network they are connected to is not compromised. 2. People The digital skills gap weighs heavily upon SMBs, who may not even have cyber specialists among their IT teams. To avoid stretching out teams, businesses can engage a Managed Security Service Provider (MSSP). An MSSP provides outsourced monitoring and management of security devices and systems. They provide customers with services around the clock, 24/7, which maintain a strong security defense. 3. Solutions Cyber threats can appear highly complex. Many SMBs fear that they don't have the visibility or power to stop them. Here is where Extended Detection and Response (XDR) can help. By collecting and analyzing data from multiple sources, these solutions gives businesses a complete view of all potential network and endpoint vulnerabilities, and enterprise security personnel can more effectively prevent cyberthreats. XDR can detect threats in real time. The faster a threat is detected, the better; as a result, security teams can investigate and act quickly. Similar to MSSP services, XDR has 365x24x7 threat monitoring, protecting even at weekends and during holidays. In the event of a cyberattack, XDR enables faster discovery, response and remediation, freeing up valuable resources to focus on more impactful projects. Prevention is always better than cure SMBs have options which need not cost them an arm and leg. There is varied choice, whether it be in the form of people who can help serve your cybersecurity needs, solutions which automate responses, or a strong sense of Zero Trust (opens in new tab) among every member of your team. SMBs needn't feel alone or unable. Answers are out there. The threat landscape is evolving in ways which demand a stronger and proactive defense from small businesses. With varied ways to do this, SMBs can be confident to use tools and resources to survive and thrive, despite the ongoing cyber threat. We've featured the best endpoint protection software (opens in new tab). Keiron HolyomeKeiron Holyome is Vice President for UKI, Middle East & Africa at BlackBerry. Are you a pro? Subscribe to our newsletter Sign up to theTechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed! Thank you for signing up to TechRadar. You will receive a verification email shortly. There was a problem. Please refresh the page and try again. MOST POPULARMOST SHARED1PC gamers are shunning high-end GPUs – spelling trouble for the Nvidia RTX 40902Samsung's smaller micro-LED 4K TV might finally be on the way to battle OLED3It looks like Fallout's spiritual successor is getting a PS5 remaster4A whole new breed of SSDs is about to break through5New Anker wireless earbuds offer a feature AirPods Pro can't – and for cheaper1Con le RTX 4000 ho capito che Nvidia ha perso la testa2Canon's next mirrorless camera could be too cheap for its own good3PC gamers are shunning high-end GPUs – spelling trouble for the Nvidia RTX 40904IT pros suffer from serious misconceptions about Microsoft 365 security5A whole new breed of SSDs is about to break through Technology Magazines (opens in new tab)● (opens in new tab)The best tech tutorials and in-depth reviewsFrom$12.99 (opens in new tab)View Deal (opens in new tab)