The Hidden Devices Putting Your Small Business at Risk

In Small Business Month 2026 alone, Comcast Business detected and blocked 230 cyber threats per second targeting small businesses. That’s proof that big businesses in big cities aren’t the only ones at risk. Small businesses right here in Pittsburgh are at greater risk than ever before, as these attacks are becoming more sophisticated and frequent with the onset of AI.

Most small business owners think about cybersecurity the same way they think about locking up their business for the night: install a security system, make sure it stays updated, and move on. But as small businesses face more attacks, the goalposts are shifting.

The just-released Comcast Business 2026 Cybersecurity Threat Report shows that the threat landscape has moved well past the front door, with the threats quietly expanding to places nobody has thought to look.

The devices slipping under the radar

It’s becoming more common for attackers to bypass digital breaking and entering. Instead of trying to break in, they’re logging in, using stolen credentials or routing activity through everyday devices not immediately thought of as a cyber risk.

The attack surface has also grown. Security cameras outside a storefront, routers in the back office, TVs providing entertainment for customers and point-of-sale (POS) systems can all be silently taken over without the business owner ever knowing. That’s because they’ve traditionally flown under the radar when it comes to cybersecurity, never being managed or monitored as closely as something like a laptop or phone.

Today, these kinds of devices are being used to disguise criminal traffic, help attackers move into business networks that trust them and even launch large-scale attacks.

The most common ways attackers get in

Businesses of all sizes face similar threats, but small businesses often lack the dedicated IT teams and infrastructure that larger businesses have. That makes them easier to breach and for attacks to go unnoticed.

Protection starts by better understanding the most common ways cybercriminals get in, no matter the business size.

Comcast Business’s report analyzed 79.3 billion cybersecurity events, finding that phishing (fake emails, texts or messaging pretending to be someone trustworthy) and drive-by compromise (simply visiting a compromised or malicious site that installs malware without clicking) are top of the list for most common attacks, with 25.4 billion and 21.9 billion attempts detected, respectively.

These attacks aim to exploit user behavior, steal credentials and compromise devices. And, they’re doing it faster. AI has unlocked a quicker route for attackers to find and exploit weaknesses faster than they can be patched up.

The report also found 5.8 million attempts to gain control of employee browsers. This means the browsers used every day by the inventory lead at a local shop or receptionist at the neighborhood clinic in Pittsburgh are now targets. And once compromised, the impact can quickly ripple beyond just the device to the rest of the business.

What small businesses can and need to do

Small businesses don’t need the expansive resources that larger businesses often have to protect themselves. A few practical steps can make a noticeable difference:

1. Map every connected device: Cameras, routers, thermostats, streaming devices and POS systems are all now part of the attack surface. Add these types of devices to the security checklist and check it twice.

2. Require multi-factor authentication and password updates: Every device and account needs this level of attention. Practice this more frequently to reduce the chance that one stolen credential turns into a full network compromise.

3. Train employees to spot phishing: Deceptive emails are the most common way attackers get in the door. Build an ongoing training program to educate employees on how to recognize and report phishing attempts, turning them into a front line of defense.

4. Limit access on a need-to-know basis: If every employee has full access to all business systems and data, the radius of the attack surface grows. Limit employees and devices to only have the access required to do their jobs.

5. Build protection into your network: Don’t wait until a breach occurs to tackle security needs. When choosing a network or internet solution, make sure it has the ability to monitor and catch threats in real time.

With recent advancements in AI and technology, along with devices nobody thinks about adding to the growing attack surface, cybercriminals are finding new, faster ways to launch their attacks. It’s more important than ever for small businesses in Pittsburgh take this Cybersecurity Awareness Month as a moment to reflect on their current processes and enact proactive measures to protect themselves now and in the future. For more information, visit this link, or reach out to your local Comcast Business teammate at Angela_Churchill2@cable.comcast.com.