◆Securidigm Watch

What's on the radar — and what's coming next.

A curated watch on the threats actually hitting small and mid-sized businesses — what's rising, where firms get breached, and the highest-leverage defense for each. Updated regularly.

Watch updated — June 2026

Threats on the radar

RansomwareElevated

Ransomware keeps hitting small businesses hardest

Attackers encrypt your files — and any backups they can reach — then demand payment, increasingly stealing data first and threatening to leak it. SMBs are favored targets because defenses are thin and downtime is unaffordable.

→ Defense: offline or immutable, regularly tested backups and least-privilege access. Read the brief →

Wire fraud / BECElevated

Business-email compromise is still the costliest fraud

Attackers compromise or spoof email to insert fraudulent payment instructions, often timed to a real invoice. Small teams that move money are a prime target — and the loss is rarely recoverable.

→ Defense: out-of-band callback verification on every payment change. Read the brief →

Account takeoverRising

Stolen passwords fuel account takeover

Infostealer malware and phishing harvest credentials that get resold in bulk. Without a second factor, one reused password can open email, banking, and your cloud apps at once.

→ Defense: phishing-resistant MFA on every account that matters. Read the brief →

Deepfake / vishingRising

AI voice-cloning used to authorize payments

Synthetic audio of an owner or manager is used to pressure staff into urgent transfers — defeating "I recognized the voice" as a control. The tooling is now cheap and convincing.

→ Defense: a shared code-phrase and dual authorization for high-value movements. Read the brief →

Where small businesses get hit

Vendor breachPersistent

Third-party and SaaS compromise exposes your data

Breaches at IT providers, SaaS vendors, and suppliers remain a leading path to your data — often outside your own walls, and often discovered late.

→ Defense: a vendor register with baseline security requirements and breach-notice clauses. Read the brief →

ExploitedOngoing

Unpatched VPNs, firewalls, and remote access

Attackers scan the internet for known vulnerabilities in internet-facing gear and walk in within days of a patch being published — long before most small teams get around to applying it.

→ Defense: an inventory and a real patch cadence for everything internet-facing.

Account takeoverCommon

Email and admin accounts without MFA

The most common root cause of a small-business breach is a single password — reused, phished, or guessed — on an account that had no second factor behind it.

→ Defense: enforce MFA on email, admin, VPN, and finance systems first. Read the brief →

Recovery gapCommon

Backups that have never been restored

Many businesses have backups but have never tested a restore — then discover during a ransomware event that the copy is incomplete, reachable by the attacker, or simply doesn't work.

→ Defense: offline/immutable copies and a documented test restore. Readiness check →

Informational only — not legal advice.