A widening cyber-security gap between big and small firms: Small firms can't scale their defences to match AI-powered attacks
AI has made cyber attacks cheap to run and easy to scale. Large firms can answer in kind: they have security teams, budgets and tools, and they can grow each as the threat grows. Small businesses cannot. Their systems are often set up and looked after by outside suppliers, their defences are seldom tested, and a break-in is often found by someone else. So the same change raises the risk for big and small firms alike but the defence only for the large, and the gap between big and small firms widens. What is missing is defence that scales the way attacks now do: priced for a small firm, and able to run without a security team.
Owners of small businesses without a security team · the IT and web suppliers that set up and look after their systems · customers whose data is taken in a break-in · the banks and insurers that carry the losses
Why now
An ENISA survey of small and medium enterprises, carried out during the pandemic, found that around nine in ten expected serious harm to their business within a week of a cyber incident and that over half believed it would likely end the business, against a backdrop of low security budgets and a lack of in-house cyber skills. BleepingComputer reported on 23 September 2026 that the security firm Gambit traced one operator who used open-source AI agents to breach at least 27 companies in five days and take more than 600,000 card records, at an average of $25.46 per completed scan. The UK government's Cyber Security Breaches Survey, published in April 2026, shows the defending side split by size: 76% of large businesses had a formal plan for handling an attack, against 21% of micro businesses
Why it matters
An existential risk to the firms that make up the overwhelming majority of businesses, where the binding constraint is operator time rather than money or intent. Security that needs nobody to watch it is a different product from the one being sold. Security products assume someone to run them: alerts to sort, tests to commission, fixes to make. Small firms buy what their IT or web supplier offers, and many already pay one for security. A small team could start with one case where the stakes are clear, such as small online shops whose checkouts draw card thieves: constant, automated checks of the site, priced for a small firm and sold through the suppliers that already look after it.
From public reporting
Framed from public reporting. Here is what it was drawn from, so the framing can be checked against it:
Found by Ainna's Radar in public reporting, then chosen and edited by Ainna's innovation team, and published on 21 September 2026. How Problem Radar works
Work it through with Ainna and it is packaged as finished documents: a problem framing document and deck, a pitch deck, a PRD and more. See the document examples
Take it to a hackathon
Use it as a challenge statement: copy it as a brief with who it affects, why now and what good looks like, ready for your event page. More hackathon problem statements on the Index.
In the collections
Hackathon problem statements 2026 · Real-world hackathon problem statements for 2026: sourced, scoped and ready to hand out. Each copies as a challenge brief with its evidence.
Cite it
“Small firms can't scale their defences to match AI-powered attacks.” Ainna Problem Radar, problem 0009, 21 September 2026. https://ainna.ai/problems/small-firms-face-enterprise-attacks-without-a-security-team
Problem Radar scans for problems worth solving, spotting them itself or finding them in public reporting, and frames each one to the same standard; Ainna's innovation team chooses and edits every problem before it goes on the Index. Every problem states where it came from and links any sources behind it. Nothing on the Index comes from a user, and what you bring to Ainna is never published. How Problem Radar works.
Support has been largely automated, and for routine questions that is an improvement. The unusual case is where it breaks: a bereavement, a billing error, a locked account, a situation the script has no branch for. The customer loops, rephrases, tries again, and eventually gives up, and the company never learns it happened, because a failed escape is rarely a metric anyone collects.
Framed by Ainna editorial
Framed 21 Sep · High (Ainna's editorial grade)
For whomCustomers in genuinely unusual situations · the few remaining human agents · support leaders flying blind
An AI research agent gathers market information. Then a second agent analyses it; a third recommends an investment, and another takes action. But what happens to the original evidence as information moves through the chain?
In multi-agent AI systems, agents frequently exchange summaries, conclusions and recommendations rather than complete evidence. Source identities, publication dates, assumptions and uncertainty can disappear during these handoffs. A tentative finding can become a confident conclusion, eventually informing a business decision without anyone knowing how trustworthy the original information was.
This creates a fundamental weakness in multi-agent automation: a chain of decisions may depend on evidence that can no longer be verified. Even when individual agents perform well, the overall system may amplify errors or lose the context needed to recognise them.
Framed by Ainna editorial
Framed 5 Nov · High (Ainna's editorial grade)
For whomOperators of multi-agent AI systems · enterprise automation teams · AI platform providers · organisations using autonomous decision workflows
A company updates its refund policy, but the old version remains in its document library. An AI assistant retrieves it, answers a customer with confidence and makes a promise the business can no longer honour.
Across organisations, thousands of documents, policies, reports and internal messages coexist without clear indicators of which are approved, current or authoritative. Enterprise AI assistants and retrieval-augmented generation (RAG) systems can retrieve outdated policies, treat drafts as approved decisions or miss critical information altogether.
The information often exists somewhere in the organisation. The problem is that AI systems cannot reliably distinguish what is true, current and applicable at the moment someone needs an answer.
Framed by Ainna editorial
Framed 5 Nov · High (Ainna's editorial grade)
For whomEmployees using enterprise AI assistants · customer service teams · legal and compliance departments · organisations with large knowledge repositories
