Small business security trends for 2021

Issue 1 2021 Information Security

A data breach could cripple your small business, costing you thousands or millions of Rands in lost sales and/or damages. High-profile cyberattacks on companies have raised awareness of the growing threat of cybercrime. Recent surveys conducted by the Small Business Authority, Symantec, Kaspersky Lab and the National Cybersecurity Alliance suggest that many small business owners are still operating under a false sense of cybersecurity.

The statistics of these studies are grim. The vast majority of small businesses lack a formal Internet security policy for employees and only about half have even rudimentary cybersecurity measures in place. Furthermore, only about a quarter of small business owners have had an outside party test their computer systems to ensure they are hacker proof and nearly 40% do not have their data backed up in more than one location.

Ransomware threats will increase

The sad reality of COVID-19 and its first, second and potential further waves is the continuously growing unemployment around the world. This has created concern over the distribution of wealth, and hackers are doing their utmost to harm corporate entities through cyberattacks. The sudden need to safely support scores of remote workers has raised concerns over the vulnerability of systems and data.

The financial industry is one of the most threatened by cybersecurity trends in 2020-2021, and for obvious reasons. Whether it is a disgruntled employee or a vigilante hacker, one individual is enough to harm the stability of a financial business.

How do you protect all your endpoints if they can be anywhere and perhaps on devices you don’t control? Is your organisation prepared for the increasing sophistication and professionalism of organised cybercriminals? Can your security infrastructure and staff pivot and adapt to rapid changes?

To cope with these permanent changes and enhanced threats, companies are looking at several technologies to pilot or implement in 2021:

• Trust no one (40%).

• Deception technology (32%).

• Authentication solutions (32%).

• Access controls (27%).

• Application monitoring (25%).

• Cloud-based security services (22%).

There will be huge security impacts in the coming year from the move to work from home (WFH) fuelled by COVID-19. More attacks will occur on home computers and networks, with bad actors even using home offices as criminal hubs by taking advantage of unpatched systems and architectural weaknesses. But this is not the only threat:

• The rush to cloud-everything will cause many security holes, challenges, misconfigurations and outages.

• More growth in the security industry. The number of new products and new-year mergers and acquisitions will cause network complexity issues and integration problems and overwhelm cyber teams.

• Privacy will be a mess, with user revolts, new laws, confusion and self-regulation failing.

• Identity and multi-factor authentication (MFA) will take centre stage as passwords (finally) start to go away in a tipping-point year.

• There will be many new high-profile Internet of Thing (IoT) hacks, some of which will make headline news.

• Ransomware will get worse and worse, with new twists, data stealing prior to encryption, malware packaging with other threats and very specific targeting of organisations.

• Lots of 5G vulnerabilities will become headline news as the technology grows.

• Advanced Persistent Threats (APT) attacks will be widely available from criminal networks. The dark web will allow criminals to buy access into more sensitive corporate networks.

• Mobile devices, including smartphones, will be attacked in new ways, including via app stores.

• Cryptocurrencies will play new roles, with criminals switching often for obscurity advantages.

• As digital transformation projects grow, many plans will implode as security challenges mount.

Worldwide 5G implementation

We live in an increasingly cloud-based world when it comes to data transfers, storage, and SaaS. Both the B2B and B2C sectors will soon have the opportunity, and later be mandated, to shift toward 5G data management technology. 5G is expected to cover almost 40% of the world by 2024, with data transfer speeds of up to 10 GBps or more. While the technology will certainly make life easier, it will also open the door for new cybersecurity threats to emerge.

With high-speed data transfers, hackers will have the ability to infect data packets and conduct corporate espionage unnoticed. That is until companies shift their focus to keep a close eye out for such malicious breach attempts. Much higher levels of security and monitoring will be required once 5G becomes the standard form of cloud-based data transfer and communication.

Some solutions

1.) The first and foremost solution to prevent cyberattacks is to have a secure and sophisticated hardware architecture which is password protected and backed up with multi-factor authentication.

2.) Safeguard your company’s hardware (like storing the data in the cloud).

3.) Encrypt data to give your company an upper hand when your data falls into the wrong hands.

4.) Backup your data. Sometimes, no matter how hard you try, hackers get into your network and try to encrypt your data with ransomware.

5.) Invest in cybersecurity insurance.

6.) Educate employees on the latest happenings in the cyber landscape.

7.) Use anti-malware solutions and protect enterprise networks with efficient firewalls.




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

71% of organisations suffered an identity breach
News & Events Information Security
The State of Identity Security 2026 report from Sophos finds human error and poor non-human identity management are the root causes of most attacks, as agentic AI accelerates the risk.

Read more...
Cyber resilience is the real defence
Security Services & Risk Management Information Security Infrastructure
Cyber resilience has evolved into a form of strategic agility, ensuring that when an interruption occurs, the business does not just survive; it snaps back into place before the market even notices a pause.

Read more...
You will not get your files back with VECT
Information Security
If the newbie to the ransomware scene, VECT, comes knocking at your organisation’s door, do not pay the ransom! The decryption keys simply do not exist. They were discarded at the moment of encryption by the malware itself.

Read more...
Industrial sector is a primary cyber target
Information Security
Threats in industrial environments are distributed with striking uniformity: APT-driven incidents constitute 17,8%, malware 14,9% and social engineering 13,9%. This pattern suggests that industrial organisations attract a broad range of adversaries with different capabilities and objectives.

Read more...
Key attributes of an effective cybersecurity leader
BlueVision Information Security
In an evolving technology landscape, an effective cyber leader must combine technical acumen, foresight, and adaptive leadership to mitigate risks, and risks can only be mitigated once accurately identified and remedial processes are in place.

Read more...
Employees are SA’s biggest cyber threat
Security Services & Risk Management Information Security
South Africa experienced a 46% increase in insider cyber risk in 2026, surpassing the global average of 44%. What is more, 63% of South African companies surveyed expect insider-driven data losses to increase.

Read more...
Surge in AI-enabled cybercrime and a 389% increase in ransomware
News & Events Information Security
Cybercrime no longer functions as a series of isolated campaigns; it operates as a system, with malicious hackers operating across an end-to-end life cycle and compressing the attack life cycle with shadow agents.

Read more...
Tackling enterprise security ‘tool sprawl’
NEC XON Information Security
South African ICT solutions provider NEC XON is advocating a shift away from fragmented cybersecurity toolsets towards unified platforms, arguing that ‘tool sprawl’ is undermining the effectiveness of enterprise security operations.

Read more...
SilverFox campaign targeting companies in South Africa
Information Security News & Events
The APT campaign involved disguising malicious files as documents related to tax violations. Upon infection, attackers could gain remote access to affected devices and exfiltrate sensitive organisational data.

Read more...
Q-Day is closer than you think
Information Security
The accelerated 2029 quantum computing deadline turns current encryption into a looming crisis as Google brings its internal post-quantum cryptography migration deadline forward to 2029.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.