9 IT Security Trends Every Mid‑Sized Business Should Care About

Shawn Akins • September 10, 2025
Connect with us

A CEO’s guide to staying secure in a fast‑changing threat landscape.



If you run a growing business, you’ve probably noticed something: cyber threats aren’t slowing down—they’re getting smarter. As CEO of Akins IT, I spend a lot of time talking with IT leaders who feel like they’re playing whack‑a‑mole with security risks. The truth? You don’t need 50 tools. You need the right priorities. Here’s what I’m seeing and what you should do about it.


1. Passwords Are Out—Passkeys Are In

Passwords are the weakest link. Hackers love them. That’s why big players like Microsoft are pushing passkeys and stronger multi‑factor authentication. If your team still relies on passwords, it’s time to move on.  Ready to ditch passwords for good? Explore our Microsoft 365 Security Solutions


2. SaaS Apps: The Hidden Back Door

Your business probably uses dozens of cloud apps. Attackers know this. They’re sneaking in through over‑permissive apps. The fix? Review what apps have access to your data and cut unnecessary permissions.  Not sure what apps have too much access?  Start with a Security Assessment


3. 24/7 Security Monitoring Is No Longer Optional

Most breaches happen because alerts get missed. That’s why Managed Detection & Response (MDR) is exploding. Our clients love it because it gives them a security team without the overhead.  Want a security team without the overhead?  See how our Managed Security Solutions work


4. AI Is a Double‑Edged Sword

AI can boost productivity—but it can also leak sensitive data if you’re not careful. Make sure you have data protection policies in place before rolling out AI tools.  Thinking about rolling out AI tools?  Get an AI Readiness Assessment


5. Phishing Just Got Smarter (and Sneakier)

Hackers are using AI to write better phishing emails—and even QR code scams (“quishing”). Train your team and use email security tools that can keep up.  Worried about AI powered phising and QR scams?  Ask us about advanced email security options.


6. Patch Fast or Pay Later

Unpatched systems are still one of the top ways businesses get breached. Automate updates and prioritize critical fixes.  Struggling to keep up with critical updates?  Talk to us about automated patching strategies.


7. Zero Trust Isn’t Just for Big Companies

The old VPN model is fading. Zero Trust security—where every user and device is verified—keeps your remote workforce safe without slowing them down.  Curious how Zero Trust works in the real world?  See how we helped Alo Yoga during COVID.


8. Ransomware Is Still Here

Ransomware attacks are up, and they’re hitting mid‑sized businesses hard. Have an incident response plan and test your backups regularly.  Is your backup plan ransomware ready?  Discover our Backup and Disaster Recovery solutions


9. Partner Up

You don’t have to do this alone. At Akins IT, we help businesses like yours stay secure without breaking the budget. From managed security to cloud protection, we’ve got your back.  Looking for a security partner who gets mid-sized businesses?  Learn more about Akins IT


Ready to Strengthen Your Security?

Let’s talk about where you are today and how we can make your business safer tomorrow.

By Shawn Akins October 20, 2025
October 20, 2025 — Early today, Amazon Web Services experienced a major incident centered in its US‑EAST‑1 (N. Virginia) region. AWS reports the event began around 12:11 a.m. PT and tied back to DNS resolution affecting DynamoDB , with mitigation within a couple of hours and recovery continuing thereafter. As the outage rippled, popular services like Snapchat, Venmo, Ring, Roblox, Fortnite , and even some Amazon properties saw disruptions before recovering. If your apps or data are anchored to a single cloud, a morning like this can turn into a help‑desk fire drill. A multi‑cloud or cloud‑smart approach helps you ride through these moments with minimal end‑user impact. What happened (and why it matters) Single‑region fragility: US‑EAST‑1 is massive—and when it sneezes, the internet catches a cold. Incidents here have a history of wide blast radius. Shared dependencies: DNS issues to core services (like DynamoDB endpoints) can cascade across workloads that never directly “touch” that service. Multi‑cloud: practical resilience, not buzzwords For mid‑sized orgs, schools, and local government, multi‑cloud doesn’t have to mean “every app in every cloud.” It means thoughtful redundancy where it counts : Multi‑region or multi‑provider failover for critical apps Run active/standby across AWS and Azure (or another provider), or at least across two AWS regions with automated failover. Start with citizen‑facing portals, SIS/LMS access, emergency comms, and payment gateways. Portable platforms Use Kubernetes and containers, keep state externalized, and standardize infra with Terraform/Ansible so you can redeploy fast when a region (or a provider) wobbles. (Today’s DNS hiccup is exactly the kind of scenario this protects against.) Resilient data layers Replicate data asynchronously across clouds/regions; choose databases with cross‑region failover and test RPO/RTO quarterly. If you rely on a managed database tied to one region, design an escape hatch. Traffic and identity that float Use global traffic managers/DNS to shift users automatically; keep identity (MFA/SSO) highly available and not hard‑wired to a single provider’s control plane. Run the playbook Document health checks, automated cutover, and comms templates. Then practice —tabletops and live failovers. Many services today recovered within hours, but only teams with rehearsed playbooks avoided user‑visible downtime. The bottom line Cloud concentration risk is real. Outages will happen—what matters is whether your constituents, students, and staff feel it. A pragmatic multi‑cloud stance limits the blast radius and keeps your mission‑critical services online when one provider has a bad day. Need a resilience check? Akins IT can help you prioritize which systems should be multi‑cloud, design the right level of redundancy, and validate your failover plan—without overspending. Let’s start with a quick, 30‑minute review of your most critical services and RPO/RTO targets. (No slideware, just actionable next steps.)
By Shawn Akins October 13, 2025
How a Zero-Day in GoAnywhere MFT Sparked a Ransomware Wave—and What Mid-Sized IT Leaders Must Do Now
By Shawn Akins October 13, 2025
The clock is ticking: Learn your options for Windows 11 migration, Extended Security Updates, and cost‑smart strategies before support ends.
More Posts