INDUSTRY INSIGHTS

Small-business checklist: could an AI-speed attacker walk in?

Easy target0 / 12

Start with the two-point items. One agent-driven break-in in the Acronis report used a default root login.

Multi-factor sign-in on email, admin panels and cloud accounts
Internet-facing software updates itself or is patched within days
No default or shared passwords left on routers, databases or admin tools
Cloud keys and secrets live in a secrets manager, not in code or page scripts
You know which servers and admin pages are reachable from the internet
Backups exist offline and a restore has been tried
AI and cloud API keys have spend limits and a rotation date
Someone named gets security alerts and outside reports