Hidden Devices Are Putting Texas Small Businesses at Risk

Comcast Business detected and blocked 230 cyberthreats targeting small businesses every second during Small Business Month 2026, a sign cybercrime is not limited to large companies or major cities. Small businesses across Texas face growing risks as attacks become more frequent and sophisticated, fueled in part by artificial intelligence.

Many small business owners approach cybersecurity like locking up at night: Install a security system, keep it updated and move on. But as attacks increase, that approach is no longer enough.

The newly released Comcast Business 2026 Cybersecurity Threat Report shows risks now extend well beyond traditional computers and network entry points. Threats are increasingly hiding in connected devices many businesses may not routinely monitor.

Connected devices can create hidden risks

Attackers do not always need to break into a network. Increasingly, they log in with stolen credentials or route activity through everyday devices not typically viewed as cybersecurity risks. Noopur Davis, chief information security and product privacy officer at Comcast Corporation, said, “Attackers have stopped needing to break in. They get in with stolen credentials, then move through the network the way an employee would. The hard part is no longer just keeping them out. It is also seeing them once they are in and preventing their lateral movement."

Security cameras outside a storefront, routers in a back office, televisions used by customers and point-of-sale systems can all be compromised without an owner realizing it. Unlike laptops and phones, these devices have not traditionally been managed or monitored as closely.

Cybercriminals can use them to disguise malicious traffic, move deeper into trusted business networks or launch large-scale attacks. Amit Verma, chief technology officer at Comcast Business, explained, “Many cybersecurity programs are designed around organizational boundaries, but cyber risk does not respect those boundaries. Today’s threats often emerge from remote employees’ home offices, supplier networks, other third-party networks, and unmanaged devices. Effective defense requires visibility into network activity across the broader environment, so organizations can identify and respond to risk wherever it originates.”

How attackers get in

Businesses of every size face similar threats, but small companies often lack the dedicated information technology teams and security infrastructure of larger organizations. This can make breaches easier to carry out and harder to detect.

Protection begins with understanding the most common entry points.

The Comcast Business report analyzed 79.3 billion cybersecurity events. It found the most common attacks were phishing, or fraudulent emails, texts or messages designed to appear trustworthy, and drive-by compromise, or malware installed after a user visits a compromised or malicious website. The report detected 25.4 billion phishing attempts and 21.9 billion drive-by compromise attempts.

The attacks are designed to exploit user behavior, steal credentials and compromise devices. AI is also helping attackers identify and exploit weaknesses faster than businesses can patch them.

The report also identified 5.8 million attempts to take control of employee browsers. This puts everyday users, from an inventory lead at a local shop to a receptionist at a Houston neighborhood clinic, in attackers’ sights. A compromised browser can quickly expose the rest of a business network.

Five steps small businesses can take now

Small businesses do not need enterprise-size budgets to improve their defenses. These practical steps can reduce risk:

●Inventory every connected device: Include cameras, routers, thermostats, streaming devices and point-of-sale systems in routine security reviews.

●Require multifactor authentication and regular password updates: Apply these safeguards to every device and account to reduce the chance that one stolen credential leads to a networkwide compromise.

●Train employees to recognize phishing: Provide ongoing training on how to identify and report deceptive messages so employees can serve as a front line of defense.

●Limit access: Give employees and devices only the system and data access needed to perform their jobs.

●Build protection into the network: Choose internet and network solutions that can monitor activity and detect threats in real time, rather than waiting for a breach to occur.

AI and a growing web of overlooked connected devices are giving cybercriminals faster ways to attack. Cybersecurity Awareness Month gives Texas small-business owners an opportunity to review their defenses, close gaps and act before a breach occurs.

For more information, read the 2026 Comcast Business Cybersecurity Threat Report.

Disclaimer: Zach Lashway is a manager and copywriter for Comcast NBCUniversal.