Cyber threats facing UK businesses are growing in volume, sophistication, and cost. In 2024, UK businesses faced a cyber attack every 44 seconds. That figure alone should reframe how every business owner thinks about their IT setup — not as an overhead, but as a front line. This article looks at what the data actually says, which threats are most common, and what practical steps businesses can take to reduce their exposure.

---

The Scale of the Problem

The numbers from 2024 are significant. According to research by Beaming, UK businesses faced more than 180,000 cyber attack attempts each between April and June 2024 alone. Furthermore, more than 1.5 million UK businesses fell victim to cybercrime over the past year, resulting in losses exceeding £30 billion.

Microsoft’s own data adds further context. Microsoft customers face more than 600 million cybercriminal and nation-state attacks every day. Additionally, Microsoft blocked 7,000 password attacks per second over the past year — every second, around the clock.

These are not statistics that apply only to large enterprises. In fact, 81% of UK businesses that suffer a cyber attack are SMEs. Consequently, the idea that smaller businesses are not targets is one of the most dangerous assumptions in modern IT.

The Most Common Threats

Phishing

Phishing remains the dominant threat to UK businesses. According to the UK government’s Cyber Security Breaches Survey, phishing was behind 93% of successful breaches against businesses in 2024. Moreover, AI is making phishing emails increasingly convincing — personalised, well-written, and far harder to spot than the obvious scams of five years ago.

In 2024, 49% of small businesses reported experiencing a phishing attack. Although this figure dropped to 42% in 2025 as cyber hygiene improved, phishing remains by far the most likely way an attacker will attempt to access your business.

Ransomware

Ransomware attacks on UK businesses increased by 70% in 2024. The average cost of remedying a ransomware attack now stands at £21,000 — and that figure does not account for reputational damage, lost productivity, or the regulatory consequences of a data breach.

Ransomware typically enters a business through one of three routes: a phishing email, an unpatched vulnerability, or compromised credentials. Therefore, addressing all three is essential.

Password and Credential Attacks

As noted above, Microsoft blocks 7,000 password attacks per second. Stolen and compromised credentials were the leading attack vector in breaches against businesses in 2024, with over 2.8 billion passwords posted for sale on criminal forums during the year alone.

The implication is clear: passwords alone are not enough. Multi-factor authentication is no longer optional — it is a baseline requirement for any business that takes security seriously.

Where Most Businesses Are Falling Short

Despite the scale of the threat, preparedness remains inconsistent. Only 29% of UK businesses carried out a cybersecurity risk assessment in 2024. That means the majority of businesses have no clear picture of where they are exposed or what an attacker might target first.

Additionally, only 22% of UK businesses have a formal cybersecurity incident management plan in place. Without one, response to an attack is slower, more expensive, and more damaging than it needs to be.

The good news is that businesses are improving. In 2025, 62% of small businesses have cyber insurance (up from 49% in 2024), and 59% have implemented formal cybersecurity policies. However, there is still significant ground to cover.

How Microsoft 365 Helps

Microsoft 365 — particularly at the E5 licence tier — includes a comprehensive set of tools designed to address exactly these threats.

Microsoft Defender for Office 365 provides advanced protection against phishing, malware, and impersonation attacks. Furthermore, its AI-powered detection adapts to emerging attack techniques in real time.

Microsoft Entra ID with MFA and Conditional Access addresses the password and credential problem directly. Risk-based conditional access can block suspicious sign-in attempts automatically — even if an attacker has a valid password.

Microsoft Defender for Endpoint protects devices against malware and ransomware, with real-time detection and automated response capabilities.

Microsoft Purview classifies and protects sensitive data, so that even if an attacker does get in, the data itself has an additional layer of defence.

Together, these tools provide coverage across the most common attack vectors — without requiring businesses to manage a complex stack of third-party security products.

What You Should Do Now

If you have not reviewed your cybersecurity posture recently, these are the most impactful steps to take:

• Enable MFA across all Microsoft 365 accounts — this single step blocks the vast majority of credential-based attacks
• Review your patch management process — unpatched software is one of the most exploited attack vectors
• Carry out a cybersecurity risk assessment — you cannot protect what you cannot see
• Check your cyber insurance policy — make sure your IT setup meets the requirements, or your claim may not pay out
• Test your backups — knowing you have backups is not the same as knowing they work

Via Wire supports businesses across Essex and Kent with fully managed Microsoft 365 security configuration, monitoring, and ongoing support. If you would like to understand how well protected your business is, get in touch at viawire.net/contact or call us on 01702 668730.