If you’re a small business owner, freelancer, or solo professional, AI-driven cyber threats are no longer theoretical — they’re happening now. A Reuters report published Oct 28, 2026, shows law firms facing a surge in AI-powered attacks, with attackers using AI to automate reconnaissance, phishing, and data access. The takeaway: attackers are using AI to scale what used to be manual efforts, making it easier to target many organizations quickly.
What happened
According to Reuters, law firms have seen a surge in cyberattacks fueled by AI. Attackers are leveraging AI tools to automate tasks that used to require human effort, such as identifying targets, probing for vulnerabilities, and crafting convincing phishing messages. The report also notes that experts are advising stronger defenses such as multi-factor authentication and tighter data-access controls to limit the potential damage.
Why it matters
- Smaller firms are increasingly attractive targets because attackers can scale operations using AI.
- Weaknesses in identity and data access can lead to rapid exfiltration or disruption of client work.
- Defending against AI-driven threats is not about one tool but about a repeatable, human-in-the-loop process.
Practical steps you can take now
- 1) Enable MFA for all users: In your identity provider’s admin console, turn on multi-factor authentication. For Microsoft 365 users: Admin center → Users → Active users → enable Multi-factor Authentication for all accounts.
- 2) Review data access and sharing: Audit who can access client files in your cloud storage and revoke any external access you don’t need. Ensure sensitive folders aren’t shared publicly. If you use Google Drive or OneDrive, check the sharing settings and adjust to least-privilege access.
- 3) Strengthen phishing defenses: Turn on anti-phishing protections in your email platform. For Microsoft 365: Security > Threat policies > Anti-phishing; enable user impersonation protections and automated phishing detection. Consider a quick phishing-simulation to train your team.
- 4) Patch and monitor for vulnerabilities: Open your patch management tool and apply critical patches to exposed software. Schedule a follow-up to verify all critical updates are deployed within 48 hours.
- 5) Prepare a tiny incident response plan: Draft a one-page plan with who to contact, initial containment steps, and a pointer to your data backups. Share it with your team and run a 15-minute tabletop exercise to practice basic containment.
- 6) Verify backups: Ensure you have recent offline/backups and test restore of a small dataset to verify integrity. This helps you recover quickly if extortion or data loss occurs.
Final thought
AI helps defenders and attackers alike, but small teams can stay resilient by layering simple, repeatable controls. Start with MFA and data-access checks this week, then add staff training and a basic IR plan next. If you’d like, I can tailor a 30-minute security checklist for your setup.