AI has changed cyber-crime. Is your Gloucestershire business ready?

Join System 15 director, Nick Rowntree on a FREE webinar for Gloucestershire SMEs on how to spot and protect their business from growing cyber threats and in particular the affect that AI is having on cyber attacks.

At the start of Cyber Awareness Month, (October 2026) System 15 director, Nick Rowntree is joining The Gloucestershire Business Hub to host a FREE webinar for Gloucestershire SMEs on how to spot and protect their business from growing cyber threats and in particular the affect that AI is having on cyber attacks.

A few years ago, spotting a phishing email was relatively easy. It was spelt badly, the sender’s address looked odd, it was addressed to a generic “Dear Customer” and the logos or footers were all mis-matched. The tell-tale signs were everywhere, if you knew where to look.

But not anymore.

Generative AI has completely rewritten the rulebook for cyber criminals, and Gloucestershire business owners, particularly those running lean teams without a dedicated IT security function are among those most exposed to what’s changed.

Find out what to look for and how to protect your business from Cybercrime with our free webinar

From spray-and-pray to personal and precise

Phishing-style email or voicemail campaigns remain the most common forms of cyber-attack. Old-style phishing emails worked on volume. The typical model was to send a badly written email to tens of thousands of people and hope that a handful clicked.

It was a numbers game, but it was often beatable with a bit of common sense.

AI has turned that model on its head.  Attackers can now use generative tools to write flawless, contextually accurate emails that mimic your genuine suppliers, clients, or colleagues, using your industry’s language, referencing real projects or relationships.

In so called Spear Phishing or Whaling attacks they can also pinpoint specific members of the business leadership, or business owners to either target or impersonate to spread an attack internally across an entire business.

AI generated audio and video attacks

As well as email creation, attackers can now generate deepfake audio and video footage that is convincing enough to impersonate a senior colleague on a call or voice message.

AI also enables an attacker to automate entire attack chains, using available information on-line to research a target business, build a tailored approach, and adapt it in real time, all with minimal human effort on the attacker’s side.

The result is that a scam which once took real time and skill to pull off convincingly can now be assembled in minutes, tailored specifically to your business, your team, and your habits.

Maybe the most disturbing aspect of this new landscape is that it’s not just big business that are targeted, SMEs are just as vulnerable.

Cyber-attacks target people not just technology

Here’s another uncomfortable truth for Gloucestershire SMEs; even the most advanced AI-powered attack still needs a human to do something for it to trigger.

It can be as simple as clicking a link, approving a payment, reading out a code or just trusting a ‘known’ voice on the phone.

Most successful cyber-attacks involve human error, not a failure of technology. And attackers know exactly where to look for it; typically, businesses where teams are busy, processes are informal, and security isn’t front of mind.

That description probably applies to a huge number of Gloucestershire SMEs, not because anyone is careless, or intentionally destructive, but because that’s simply what running a small business often looks like: people wearing multiple hats, moving fast, and trusting their colleagues and suppliers to be and do what they say they will.

That’s not a criticism. It’s exactly why this deserves real focus and why we are hosting a webinar specifically on this topic. We want businesses to be prepared, rather than assuming that “someone will spot it and do the right thing,”

Why everyday habits lead to costly mistakes

Some of the most ordinary workplace habits are also the ones cyber-attacks are specifically designed to exploit:

• Approving payments or password changes based on an email or message
• Businesses not having a second channel of verification
• Assuming a familiar name or logo in the sender field means the message is genuine
• Reusing passwords, or not having multi-factor authentication switched on for business-critical systems
• Trusting a phone call or voice note because it “sounded right”

None of these habits are unusual. They’re the kind of thing almost every small business does, every single day, without a second thought. That’s precisely the point and precisely why it’s worth a second thought.

If you want a deeper look at the specific signs your business might already be exposed, System 15 has a dedicated guide on the warning signs Gloucestershire businesses often miss.

Why Cyber security should matter more for Gloucestershire SMEs

Larger organisations often have layers of process built into their daily routines; a finance team big enough that payment approval naturally involves more than one person, an IT department that flags unusual login activity. Smaller and solo-preneur businesses frequently don’t have those layers, which means one convincing message can go a lot further, a lot faster.

Add in AI’s ability to personalise an attack cheaply and at scale, and the relatively small rewards that once protected small businesses the ones that think “we’re not big enough to be worth the effort” simply doesn’t apply anymore.

See cyber security in action

Reading about AI-powered phishing is one thing. Seeing how convincingly an attack can be built, live, is another entirely and it’s exactly what’s on the agenda on the upcoming webinar hosted by System 15 and Gloucestershire Growth Hub that is free for local businesses.

“It won’t happen to me” and other things unsuspecting business owners say before a cyber breach
Thursday October 1st
11.00-12.00

Alongside a look at how cyber-attacks work, you’ll get a practical rundown of the human habits that open the doors to a cyber-attack and five simple steps you can take to close the gaps in your own business with no technical background required.

If you run a Gloucestershire SME, or you’re the one person holding the whole business together, this is an hour that could save you a very expensive few weeks further down the line.