Small business security trends for 2021

Issue 1 2021 Information Security

A data breach could cripple your small business, costing you thousands or millions of Rands in lost sales and/or damages. High-profile cyberattacks on companies have raised awareness of the growing threat of cybercrime. Recent surveys conducted by the Small Business Authority, Symantec, Kaspersky Lab and the National Cybersecurity Alliance suggest that many small business owners are still operating under a false sense of cybersecurity.

The statistics of these studies are grim. The vast majority of small businesses lack a formal Internet security policy for employees and only about half have even rudimentary cybersecurity measures in place. Furthermore, only about a quarter of small business owners have had an outside party test their computer systems to ensure they are hacker proof and nearly 40% do not have their data backed up in more than one location.

Ransomware threats will increase

The sad reality of COVID-19 and its first, second and potential further waves is the continuously growing unemployment around the world. This has created concern over the distribution of wealth, and hackers are doing their utmost to harm corporate entities through cyberattacks. The sudden need to safely support scores of remote workers has raised concerns over the vulnerability of systems and data.

The financial industry is one of the most threatened by cybersecurity trends in 2020-2021, and for obvious reasons. Whether it is a disgruntled employee or a vigilante hacker, one individual is enough to harm the stability of a financial business.

How do you protect all your endpoints if they can be anywhere and perhaps on devices you don’t control? Is your organisation prepared for the increasing sophistication and professionalism of organised cybercriminals? Can your security infrastructure and staff pivot and adapt to rapid changes?

To cope with these permanent changes and enhanced threats, companies are looking at several technologies to pilot or implement in 2021:

• Trust no one (40%).

• Deception technology (32%).

• Authentication solutions (32%).

• Access controls (27%).

• Application monitoring (25%).

• Cloud-based security services (22%).

There will be huge security impacts in the coming year from the move to work from home (WFH) fuelled by COVID-19. More attacks will occur on home computers and networks, with bad actors even using home offices as criminal hubs by taking advantage of unpatched systems and architectural weaknesses. But this is not the only threat:

• The rush to cloud-everything will cause many security holes, challenges, misconfigurations and outages.

• More growth in the security industry. The number of new products and new-year mergers and acquisitions will cause network complexity issues and integration problems and overwhelm cyber teams.

• Privacy will be a mess, with user revolts, new laws, confusion and self-regulation failing.

• Identity and multi-factor authentication (MFA) will take centre stage as passwords (finally) start to go away in a tipping-point year.

• There will be many new high-profile Internet of Thing (IoT) hacks, some of which will make headline news.

• Ransomware will get worse and worse, with new twists, data stealing prior to encryption, malware packaging with other threats and very specific targeting of organisations.

• Lots of 5G vulnerabilities will become headline news as the technology grows.

• Advanced Persistent Threats (APT) attacks will be widely available from criminal networks. The dark web will allow criminals to buy access into more sensitive corporate networks.

• Mobile devices, including smartphones, will be attacked in new ways, including via app stores.

• Cryptocurrencies will play new roles, with criminals switching often for obscurity advantages.

• As digital transformation projects grow, many plans will implode as security challenges mount.

Worldwide 5G implementation

We live in an increasingly cloud-based world when it comes to data transfers, storage, and SaaS. Both the B2B and B2C sectors will soon have the opportunity, and later be mandated, to shift toward 5G data management technology. 5G is expected to cover almost 40% of the world by 2024, with data transfer speeds of up to 10 GBps or more. While the technology will certainly make life easier, it will also open the door for new cybersecurity threats to emerge.

With high-speed data transfers, hackers will have the ability to infect data packets and conduct corporate espionage unnoticed. That is until companies shift their focus to keep a close eye out for such malicious breach attempts. Much higher levels of security and monitoring will be required once 5G becomes the standard form of cloud-based data transfer and communication.

Some solutions

1.) The first and foremost solution to prevent cyberattacks is to have a secure and sophisticated hardware architecture which is password protected and backed up with multi-factor authentication.

2.) Safeguard your company’s hardware (like storing the data in the cloud).

3.) Encrypt data to give your company an upper hand when your data falls into the wrong hands.

4.) Backup your data. Sometimes, no matter how hard you try, hackers get into your network and try to encrypt your data with ransomware.

5.) Invest in cybersecurity insurance.

6.) Educate employees on the latest happenings in the cyber landscape.

7.) Use anti-malware solutions and protect enterprise networks with efficient firewalls.




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Want effective Attack Surface Management? Think like an attacker.
Information Security
Effective ASM requires companies to think like attackers, anticipate risks, and act decisively to reduce exposure by knowing their environment, deploying a structured approach, leveraging capable tools, and addressing both internal and external risks.

Read more...
The growing role of hybrid backup
Infrastructure Information Security
As Africa’s digital economy rapidly grows, businesses across the continent are facing the challenge of securing data in an environment characterised by evolving cyberthreats, unreliable connectivity and diverse regulatory frameworks.

Read more...
POPIA non-compliance puts municipalities at risk
Information Security Government and Parastatal (Industry)
Digital responsibility must go beyond POPIA compliance to recognising that privacy and service delivery are fundamentally linked. Despite this, only 51 out of 257 municipalities submitted their mandatory data protection and access to information reports in 2024.

Read more...
Choicejacking bypasses smartphone charging security
News & Events Information Security
Choicejacking is a new cyberthreat that bypasses smartphone charging security defences to confirm, without the victim’s input or consent, that the victim wishes to connect in data-transfer mode.

Read more...
Most wanted malware
News & Events Information Security
Check Point Software Technologies unveiled its Global Threat Index for June 2025, highlighting a surge in new and evolving threats. Eight African countries are among the most targeted as malware leaders AsyncRAT and FakeUpdates expand.

Read more...
Welcome to the new cyber battleground
Information Security
The Iran-Israel conflict is rapidly redefining modern warfare, pushing the boundaries of cyber capabilities and creating a new, borderless digital battlefield. Fortinet’s CISO, Dr Carl Windsor, offers a critical, in-depth analysis of the escalating tactics and global implications in his latest report.

Read more...
African industries may overestimate cyber defences
Information Security
A significant perception gap exists in security awareness training: 68% of leaders believe training is tailored to roles, yet only a third of employees feel adequately trained. Many organisations only conduct annual or biannual generic training that may not effectively change behaviour.

Read more...
SMARTpod talks to Sophos and Phishield
SMART Security Solutions Technews Publishing Sophos Videos Information Security News & Events
SMARTpod recently spoke with Pieter Nel, Sales Director for SADC at Sophos, and Sarel Lamprecht, MD at Phishield, about ransomware and their new cyber insurance partnership.

Read more...
Highest increase in global cyberattacks in two years
Information Security News & Events
Check Point Global Research released new data on Q2 2024 cyber-attack trends, noting a 30% global increase in Q2 2024, with Africa experiencing the highest average weekly per organisation.

Read more...
Corporate and academic teams can register for Kaspersky contest
Kaspersky News & Events Information Security
Kaspersky has announced the registration opening for its new Kaspersky{CTF} (Capture the Flag) competition, inviting academic and corporate teams from around the globe to compete in a battle of skill, strategy and innovation.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.