Kaspersky warns that attackers are currently deploying the same methods against smaller businesses as they do against large enterprises. To help strengthen corporate defences, Kaspersky is releasing new recommendations alongside findings from a global survey by its Internal Research Center, which found that just 13% of businesses with fewer than 500 employees in APAC region avoided a cyber incident in the past year.
Vietnam encountered highest incidents in the region at 97%, followed by Malaysia (95%), Indonesia (92), and India (87%). Thailand and China reported incidents lower than regional average at 82% and 67% respectively.
The illusion that small and mid-sized businesses (SMBs) can fly under the radar of cybercriminals is becoming obsolete. As smaller organizations digitalize, and the cost of launching cyberattacks plummets, threat actors are increasingly shifting their focus toward growth-stage companies, weaponizing emerging technologies and exploiting all possible cybersecurity gaps.
Kaspersky, a global cybersecurity and digital privacy company, surveyed IT security specialists across SMBs and enterprises in 18 countries to provide insights into the most critical risks facing businesses today.
The study reveals that, on average, organizations in APAC experienced three different types of security incidents over the past year. For SMBs, software vulnerability exploitation (20%), phishing (19%), and mass malware attack (18%) top the list of the most frequently encountered breaches. Even though zero-day exploits ranked lowest, this extreme dangerous attack was still encountered by 6% of organizations.
Respondents in APAC were also asked to select the top five factors that elevate the risk of successful cyberattacks in organizations. The two most frequently chosen factors by SMBs were people-related: lack of security awareness among non-IT employees (26%) and lack of expertise among IT security staff (24%). Additionally, respondents selected outdated software or hardware (23%), lack of regular risk assessments (22%) and lack of necessary security solutions (22%) as key issues.
To address rising threats and internal challenges, most APAC companies plan to enhance their IT security function (75%), and 78% of SMBs have already increased their cybersecurity budgets this year. Almost half (48%) allocated additional funds to expand their IT and IT security teams, while nearly one-third (32%) did so to migrate to advanced IT security solutions such as XDR, NDR, and SIEM.
“The current reality when companies of all sizes can be targeted with all possible methods urges business to reconsider their security posture. Sophisticated attacks easily bypass fragmented defenses, requiring advanced tools and a skilled team to counter them. However, growing companies are often held back by budget constraints and the global InfoSec talent shortage,” says Mr. Ilya Markelov, Head of Unified Platform Product Line at Kaspersky. “That is why modern cybersecurity solutions must deliver more with less. Instead of introducing complex new tools that demand hard-to-find, expensive expertise, vendors should focus on cutting complexity. When designing our products for SMBs, our goal is to provide advanced protection that is easy to adopt, simple to manage, and able to grow alongside the business, helping organizations strengthen their security without adding unnecessary complexity or stretching their budget”.
“SMBs across APAC are no longer the collateral damage or secondary target. Our survey shows that they are prime victims for modern threat actors who use the exact same enterprise-level tactics,” says Mr. Adrian Hia, Managing Director for Asia Pacific at Kaspersky. “However, the fact that the majority of SMBs step up their cybersecurity budgets indicates a strong signal that business leaders understand the importance of cybersecurity. The goal ahead is not about burdening teams with overly complex tools, but about securing essential systems, empowering non-IT employees, and deploying managed security solutions that scale smoothly as businesses grow.”
“As a company that helps clients adopt a security maturity model to navigate current digital trends, we see that the cyber challenge is intensifying. Attackers increasingly leverage on artificial intelligence, driving up both the volume and complexity of today’s threats. Also, credential protection has become paramount as attackers exploit security gaps to harvest high-value logins for targeted attacks that disrupt business operations or cause data theft. Consequently, raising importance of educating non-technical users who remain one of the weakest links,” comments Mr. Maximiliano Allo, Director at Custom IT. “Kaspersky offers a wide range of suites, enabling companies with smaller budgets or limited staff to effectively counter these threats. Their SMB suites feature robust automation and a centralized management console, delivering enterprise-grade security without requiring significant time investments.”
To protect against emerging threats, Kaspersky provides the following recommendations for small and medium businesses:
- Establish internal processes: implement strict access rules for all corporate resources and cloud services, ensuring IT promptly revokes permissions during employee offboarding. Second, integrate automated data backups into daily operations to secure critical information against emergencies and ransomware. Finally, back these technical controls with continuous human risk management: simplify cybersecurity guidelines for safe browsing and password hygiene and require IT approval for all new software. These actions will allow to minimize related cyber incidents such as insider threats, use of weak or stolen credentials and exploitation of lost or stolen IT assets.
- Protect your people: Conduct dedicated training to teach staff how to detect and address potential threats, including deepfakes and vishing and track their educational progress. Organizations can achieve this with the Kaspersky Automated Security Awareness Platform through interactive online modules and simulated phishing campaigns that build sustainable cyber hygiene habits across all teams.
If you have an interesting Article / Report/case study to share, please get in touch with us at editors@roymediative.com roy@roymediative.com, 9811346846/9625243429
