4 Lesser-Known Cyberthreats Small Businesses Should Know in 2026

By , Owner, PDX Information Technology Services

Last updated:

Most owners have heard of phishing and ransomware. Several quieter threats show up less often in the news but catch busy teams off guard, especially staff who travel, work from coffee shops or use their own phones for work. Here are four to put in front of your team.

1. Juice jacking

Public USB charging stations at airports, hotels and events can be tampered with to try to install malware or copy data from a connected device. Carry your own charger and plug it into a wall outlet, or use a USB data blocker that allows power only.

2. Malicious apps

Bad apps can steal data, show unwanted ads or give an attacker remote access. Install apps only from official stores, check the developer and reviews, and remove apps nobody uses. For company devices, a managed provider can restrict what gets installed.

3. Malicious QR codes

QR codes on parking meters, flyers, menus and emails can point to fake login pages. Treat them like links: look at the web address before you enter anything, and never sign in to Microsoft 365 or banking after scanning a code in an unexpected message.

4. Public Wi-Fi without protection

Open Wi-Fi makes it easier for someone nearby to watch or tamper with traffic. Use your phone hotspot when you can, make sure sites use HTTPS, require multi-factor authentication on business accounts, and use a company VPN where your policy calls for one.

Make it part of training

None of these require special tools to avoid, only habits. Short, regular security awareness training that includes real examples works better than a once-a-year slide deck.

Related reading

Talk to a local team

PDX Information Technology Services provides managed IT, cybersecurity and compliance support for small businesses in Portland, Lake Oswego, Beaverton, Hillsboro and Vancouver, WA. Plans start at $100 per user per month (Gold) and $180 per user per month (Platinum). Call 971-331-4871 or book a free assessment.

Request an IT assessment

Tell us a little about your business and a PDX IT team member will follow up to schedule an assessment. Prefer to talk? Call 971-331-4871.

  • This field is for validation purposes and should be left unchanged.
  • No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties
Steve Shaff, owner of PDX Information Technology Services

About the author: Steve Shaff

Steve Shaff is the owner of PDX Information Technology Services, a managed IT provider he founded in 2020. From the Tualatin office he helps businesses across Portland Metro & Southwest Washington with IT support, cybersecurity and compliance. More about Steve ยท Contact PDX IT

Get In Touch
Contact Us
Share On Social Media
Other Recent Blog Articles
Infostealer Malware: How Stolen Session Cookies Get Past MFA (and How to Stop It)
November 7, 2026

Infostealer malware copies saved passwords and live session cookies from a browser and sells them on the dark web, which lets attackers walk past MFA. Here’s how it works and a practical 10-step plan for Portland-area small businesses.

Double Extortion Ransomware: When Gangs Sell Your Stolen Data on the Dark Web (A Small Business Guide)
November 6, 2026

Modern ransomware gangs don’t just lock your files. They copy your data first, then threaten to publish or sell it on the dark web. Here is how double extortion works and what Portland-area small businesses can do before, during and after an attack.

Portland Small Business Mobile Security: How to Protect Phones, Public Wi-Fi and Wireless Devices
November 5, 2026

Portland small business mobile security checklist: lock phones, avoid risky public Wi-Fi, secure office wireless, spot text scams and handle lost phones.