SME CYBER THREAT INTEL: AI-Driven Threats Force One Third of Global Organisations to Overhaul Security Architecture

Small UK businesses urged to prepare for evolving AI security landscape as financial impacts of breaches nearly double

A new global cybersecurity study has revealed that more than one in three organisations worldwide (37%) have been forced to adjust their security approaches specifically to combat emerging AI-driven threats. The 2025 Cybersecurity Trends Report, released yesterday by security provider Netwrix, surveyed 2,150 IT and security professionals across 121 countries and paints a concerning picture of how artificial intelligence is reshaping the cybersecurity landscape.

AI Adoption Widespread Despite Security Concerns

The report found that 60% of organisations are already implementing AI within their IT infrastructure, with another 30% actively considering deployment. However, this technological advancement comes with significant security challenges:

* 37% report that new AI-driven threats have forced security architecture changes
* 30% face an expanded attack surface due to business users adopting AI tools
* 29% struggle with compliance requirements around data security in AI systems

For UK small businesses, these findings signal an urgent need to evaluate how AI usage—both internally and by threat actors—impacts their security posture.

Financial Impact of Breaches Increasing Dramatically

Perhaps most concerning for resource-constrained SMEs is the report’s finding that financial damage from cyberattacks has increased substantially. Three-quarters (75%) of organisations reported financial impacts from security incidents—up from 60% in 2024. Even more alarming, the number of organisations suffering damages of £156,000 (approximately $200,000) or more has nearly doubled from 7% to 13% in just one year. Identity-Based Attacks on the Rise Jeff Warren, Chief Product Officer at Netwrix, highlighted that identity-driven attacks are becoming increasingly sophisticated, with new methods including:

* Advanced techniques to bypass multi-factor authentication
* Abuse of service accounts and machine-to-machine tokens
* AI-powered deepfake phishing using convincing voice and video
* Creation of synthetic identities at scale