At Magneticca we’re taking a new direction: security is becoming a core part of what we do. To start, here’s a short look at the threats we see most often against businesses today and what you can do about each one.
1. AI-powered phishing and deepfakes
Phishing emails used to be easy to spot because of the spelling mistakes. Attackers now use generative AI to write messages that are polished, personal and convincing. Some go further and clone an executive’s voice or face to approve an “urgent” payment.
What helps: Filter email for phishing and malicious attachments before it reaches the inbox. Train staff regularly so they judge a request by what it asks for, not by how professional it looks. Always confirm a payment request through a second channel.
2. Stolen sessions instead of stolen passwords
Multi-factor authentication raised the bar, so attackers adapted. Infostealer malware and phishing kits now steal session tokens, which lets an attacker skip both the password and the MFA prompt. “MFA fatigue” attacks, where users are flooded with approval prompts until one gets accepted, are still common too.
What helps: Combine strong MFA with proper Identity & Access Management. Monitor logins all the time so that a sign-in from an unusual device or location gets flagged and acted on.
3. Ransomware aimed at smaller businesses
Ransomware groups no longer go only after large enterprises. Small and mid-sized companies are attractive targets because their defences are often thinner. Most attacks now use “double extortion”: the data is encrypted and stolen, with a threat to publish it.
What helps: Use endpoint protection that stops the malware before it runs. Split the network into zones so an infection can’t spread, and watch east-west traffic to catch an attacker moving from one machine to the next.
4. Unpatched systems
VPN gateways, firewalls and remote-access tools sit directly on the internet. They are among the most actively exploited entry points, and attackers often use a newly published vulnerability within days.
What helps: Run vulnerability scans on a schedule, back them with disciplined patch management, and use a next-generation firewall at the network edge.
5. Software supply chain attacks
Attackers increasingly compromise the tools businesses already trust, such as open-source packages, plugins, browser extensions and update mechanisms. One poisoned dependency can reach thousands of organisations at once.
What helps: Use threat intelligence feeds with indicators of compromise that are updated daily. Run proactive threat hunting to find the compromises that slip past the first line of defence.
Our new path
Security isn’t a product you buy once. It’s an ongoing practice. Over the coming months we’ll share more practical guidance and expand how we help our clients protect their systems, data and people.
If you’d like to talk about your organisation’s security posture, get in touch.
