The Evolving Landscape Of Social Engineering

Small British businesses face an evolving cyber threat landscape in 2025, with incidents becoming more sophisticated as threat actors expand their toolkit. Recent data reveals that, in the last year, 42% of small businesses reported cyber security incidents with the figure rising to 67% for medium-sized businesses. The data indicates that smaller enterprises are not necessarily siloed from cyber incidents; threat actors recognise that smaller businesses are more accessible targets than more sophisticated enterprises with greater resources to invest in cybersecurity.

Social engineering remains a popular tool in a threat actor's toolkit, with 85% of British businesses being targeted by email scams. The popularity of phishing amongst threat actors is not surprising. Smaller enterprises often rely on email for critical business communications and may lack formal verification procedures for financial requests. Staff members frequently wear multiple hats, making them