Bored or intimidated by the idea of beefing up your cybersecurity? We get it. Online security is not the most exciting or accessible concept in the world. But if you do anything important online, then it’s one of the most critical things for you and your organization.

For every small and medium business (SMB) that has not been the target of a cyber attack, one has been. Yes, 50 percent of SMBs have experienced cyber attacks.

When attacks are successful, and a data breach occurs, the typical cost to repair the damage is more than $36,000. Worse still, as much as 60 percent of small businesses crumble within six months following.

But take note—there is a huge difference between being the target of a cyber attack and being successfully breached. What keeps someone in the former group and out of latter often comes down to simple oversights.

Cybersecurity Basics for Small Business

Watch this video to learn some cybersecurity basics. Learn how to put them into practice, in your small business!

7 Cybersecurity Tips NOBODY Tells You (but are EASY to do)

We've heard it all before: Use strong passwords, set up 2FA, use a VPN on public WiFi. These are all good, but what is the next step that you can take that will actually have a positive impact on your online security.

Here are 7 uncommon tips that rarely get talked about, but are fairly easy to start implementing.

How Easy It Is To Crack Your Password?

Kevin Mitnick from KnowBe4 shares his recommendations for using passphrases as passwords and shows just how easy it is for hackers to crack bad passwords!

Phishing Exploit Hacks LinkedIn 2-Factor Authentication?

Kevin Mitnick from KnowBe4 shows how the exploit is based on a credentials phishing attack that uses a typo-squatting domain.

Once the user falls for this social engineering tactic and enters their credentials, the 2FA token gets intercepted and it's easy to hack into the LinkedIn account.

Ransomcloud Demonstration

Kevin Mitnick from KnowBe4 demonstrates a new type of ransomware called 'Ransomcloud,' which encrypts cloud email accounts, such as Office 365 in real-time.

This strain uses a smart social engineering tactic to trick the user to give the bad guys access to their cloud email account, with the ruse of a "new Microsoft anti-spam service".