Small business security trends for 2021

Issue 1 2021 Information Security

A data breach could cripple your small business, costing you thousands or millions of Rands in lost sales and/or damages. High-profile cyberattacks on companies have raised awareness of the growing threat of cybercrime. Recent surveys conducted by the Small Business Authority, Symantec, Kaspersky Lab and the National Cybersecurity Alliance suggest that many small business owners are still operating under a false sense of cybersecurity.

The statistics of these studies are grim. The vast majority of small businesses lack a formal Internet security policy for employees and only about half have even rudimentary cybersecurity measures in place. Furthermore, only about a quarter of small business owners have had an outside party test their computer systems to ensure they are hacker proof and nearly 40% do not have their data backed up in more than one location.

Ransomware threats will increase

The sad reality of COVID-19 and its first, second and potential further waves is the continuously growing unemployment around the world. This has created concern over the distribution of wealth, and hackers are doing their utmost to harm corporate entities through cyberattacks. The sudden need to safely support scores of remote workers has raised concerns over the vulnerability of systems and data.

The financial industry is one of the most threatened by cybersecurity trends in 2020-2021, and for obvious reasons. Whether it is a disgruntled employee or a vigilante hacker, one individual is enough to harm the stability of a financial business.

How do you protect all your endpoints if they can be anywhere and perhaps on devices you don’t control? Is your organisation prepared for the increasing sophistication and professionalism of organised cybercriminals? Can your security infrastructure and staff pivot and adapt to rapid changes?

To cope with these permanent changes and enhanced threats, companies are looking at several technologies to pilot or implement in 2021:

• Trust no one (40%).

• Deception technology (32%).

• Authentication solutions (32%).

• Access controls (27%).

• Application monitoring (25%).

• Cloud-based security services (22%).

There will be huge security impacts in the coming year from the move to work from home (WFH) fuelled by COVID-19. More attacks will occur on home computers and networks, with bad actors even using home offices as criminal hubs by taking advantage of unpatched systems and architectural weaknesses. But this is not the only threat:

• The rush to cloud-everything will cause many security holes, challenges, misconfigurations and outages.

• More growth in the security industry. The number of new products and new-year mergers and acquisitions will cause network complexity issues and integration problems and overwhelm cyber teams.

• Privacy will be a mess, with user revolts, new laws, confusion and self-regulation failing.

• Identity and multi-factor authentication (MFA) will take centre stage as passwords (finally) start to go away in a tipping-point year.

• There will be many new high-profile Internet of Thing (IoT) hacks, some of which will make headline news.

• Ransomware will get worse and worse, with new twists, data stealing prior to encryption, malware packaging with other threats and very specific targeting of organisations.

• Lots of 5G vulnerabilities will become headline news as the technology grows.

• Advanced Persistent Threats (APT) attacks will be widely available from criminal networks. The dark web will allow criminals to buy access into more sensitive corporate networks.

• Mobile devices, including smartphones, will be attacked in new ways, including via app stores.

• Cryptocurrencies will play new roles, with criminals switching often for obscurity advantages.

• As digital transformation projects grow, many plans will implode as security challenges mount.

Worldwide 5G implementation

We live in an increasingly cloud-based world when it comes to data transfers, storage, and SaaS. Both the B2B and B2C sectors will soon have the opportunity, and later be mandated, to shift toward 5G data management technology. 5G is expected to cover almost 40% of the world by 2024, with data transfer speeds of up to 10 GBps or more. While the technology will certainly make life easier, it will also open the door for new cybersecurity threats to emerge.

With high-speed data transfers, hackers will have the ability to infect data packets and conduct corporate espionage unnoticed. That is until companies shift their focus to keep a close eye out for such malicious breach attempts. Much higher levels of security and monitoring will be required once 5G becomes the standard form of cloud-based data transfer and communication.

Some solutions

1.) The first and foremost solution to prevent cyberattacks is to have a secure and sophisticated hardware architecture which is password protected and backed up with multi-factor authentication.

2.) Safeguard your company’s hardware (like storing the data in the cloud).

3.) Encrypt data to give your company an upper hand when your data falls into the wrong hands.

4.) Backup your data. Sometimes, no matter how hard you try, hackers get into your network and try to encrypt your data with ransomware.

5.) Invest in cybersecurity insurance.

6.) Educate employees on the latest happenings in the cyber landscape.

7.) Use anti-malware solutions and protect enterprise networks with efficient firewalls.




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Highest increase in global cyberattacks in two years
Information Security News & Events
Check Point Global Research released new data on Q2 2024 cyber-attack trends, noting a 30% global increase in Q2 2024, with Africa experiencing the highest average weekly per organisation.

Read more...
Upgrade your PCs to improve security
Information Security Infrastructure
Truly secure technology today must be designed to detect and address unusual activity as it happens, wherever it happens, right down to the BIOS and silicon levels.

Read more...
Open source code can also be open risk
Information Security Infrastructure
Software development has changed significantly over the years, and today, open-source code increasingly forms the foundation of modern applications, with surveys indicating that 60 – 90% of the average application's code base consists of open-source components.

Read more...
DeepSneak deception
Information Security News & Events
Kaspersky Global Research & Analysis researchers have discovered a new malicious campaign which is distributing a Trojan through a fake DeepSeek-R1 Large Language Model (LLM) app for PCs.

Read more...
SA’s strained, loadshedding-prone grid faces cyberthreats
Power Management Information Security
South Africa’s energy sector, already battered by decades of underinvestment and loadshedding, faces another escalating crisis; a wave of cyberthreats that could turn disruptions into catastrophic failures. Attacks are already happening internationally.

Read more...
Almost 50% of companies choose to pay the ransom
News & Events Information Security
This year’s Sophos State of Ransomware 2025 report found that nearly 50% of companies paid the ransom to get their data back, the second-highest rate of ransom payment for ransom demands in six years.

Read more...
Survey highlights cost of cyberdamage to industrial companies
Kaspersky Information Security News & Events
The majority of industrial organisations estimate their financial losses caused by cyberattacks to be over $1 million, while almost one in four report losses exceeding $5 million, and for some, it surpasses $10 million.

Read more...
Digital economy needs an agile approach to cybersecurity
Information Security News & Events
South Africa is the most targeted country in Africa when it comes to infostealer and ransomware attacks. Being at the forefront of the continent’s digital transformation puts South Africa in the crosshairs for sophisticated cyberattacks

Read more...
SIEM rule threat coverage validation
Information Security News & Events
New AI-detection engineering assistant from Cymulate automates SIEM rule validation for SecOps and blue teams by streamlining threat detection engineering with automated testing, control integrations and enhanced detections.

Read more...
Cybersecurity a challenge in digitalising OT
Kaspersky Information Security Industrial (Industry)
According to a study by Kaspersky and VDC Research on securing operational technology environments, the primary risks are inadequate security measures, insufficient resources allocated to OT cybersecurity, challenges surrounding regulatory compliance, and the complexities of IT/OT integration.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.