Cyber security trends for small business

AI scams are becoming harder to recognise

Artificial intelligence can help scammers create more convincing emails, messages, images and videos. Familiar warning signs such as poor spelling or unusual wording may be less obvious, making impersonation scams harder to detect.

Want to understand how AI is changing cyber security in more detail? Visit our guide to AI in cyber security.

What small businesses can do

To reduce the risk of AI-enabled scams:

• verify unusual payment or information requests using a separate communication channel
• encourage employees to question urgent requests
• use approval processes for payment changes
• make it easy for staff to report suspicious activity
• enable multi-factor authentication (MFA).

Discover common tactics and warning signs in our guide to phishing risks for business and learn more about multi-factor authentication.

Email, identity and payment scams remain a risk

Business email compromise, invoice fraud and account takeover scams continue to target small businesses. These scams often use trusted brands, familiar contacts or legitimate-looking invoices to appear convincing. 

What small businesses can do

To help reduce the risk of payment fraud and account compromise:

• verify payment changes before acting
• review user access permissions regularly
• restrict access to financial systems
• use strong passwords and MFA
• train employees to recognise scam tactics.

Learn how business email compromise works and explore our guide to password management for business.

Review supplier and cloud access regularly

Many businesses rely on cloud platforms and third-party providers for day-to-day operations. These services can introduce additional cyber security considerations if access, permissions and stored data are not managed appropriately.

What small businesses can do

When reviewing suppliers, platforms and cloud tools:

• review who can access business data
• check whether platforms support MFA
• understand how security incidents are managed
• review administrator permissions regularly
• remove access that is no longer required.

Read more about cloud security for business.

Secure the devices your business relies on

Laptops, phones and tablets are now essential business tools. As more people work from different locations and use multiple devices, securing those devices becomes increasingly important. 

What small businesses can do

To help reduce device-related risks:

• use screen locks, passwords or biometrics
• keep operating systems updated
• enable MFA where possible
• establish clear BYOD expectations
• remove access from lost or retired devices.

For practical guidance, see protecting workplace mobile devices and BYOD policies and best practices.

Cyber resilience is as important as prevention

Not every cyber incident can be prevented. Businesses that plan for recovery are often better positioned to minimise disruption and continue operating if something goes wrong.

What small businesses can do

To improve your ability to respond and recover from cyber incidents:

• back up important business data
• test backup restoration processes
• enable automatic software updates
• document incident response procedures
• ensure staff know how to report suspicious activity.

Build your approach with the 3-2-1 backup strategy and explore steps to take if your business is targeted by cyber crime.

Need help strengthening your cyber security?

Understanding cyber security trends is a good first step, but you don't have to navigate cyber security on your own.

Start with our Cyber Security Basics for small business guide for practical actions you can take today, or contact your Telstra Business Technology Centre if you'd like advice tailored to your business.