AI–generated attacks have become the primary cybersecurity worry for UK small and medium-sized enterprises (SMEs) in 2025, according to the *Mapping the UK SME Cyber Security Landscape* report, commissioned by Six Degrees, a provider of secure, integrated cloud services.
The report reveals that over a third (35%) of respondents view AI-driven threats as their top concern, surpassing other risks such as malware (25%), scams and fraud (25%), phishing (25%), and ransomware (23%).
While these threats dominate the list, others, including insider attacks, zero-day vulnerabilities, and denial-of-service incidents, still pose significant risks. The findings highlight a potential pitfall: SMEs may be so focused on AI-related threats that they underestimate other critical dangers.
SMEs are responding to these challenges by strengthening their defenses, often with the help of managed cybersecurity services. Notably, nearly one-third of respondents who reported significant improvements in their cybersecurity cited increased use of advanced tools and solutions. Additionally, 20% mentioned a shift to hybrid or multi-cloud environments as part of their enhanced security strategy.
