Cyber Attacks: What They Are, Why They’re Increasing, and How to Protect Your Business

19 May 2026

Cyber attacks are no longer rare or isolated events. They are now one of the most common causes of serious business disruption, including here in New Zealand, where organisations of all sizes are being increasingly targeted and impacted. What was once seen as a risk primarily for large enterprises is now a reality for everyday businesses operating across all sectors. (Source: NCSC Cyber Threat Report 2025)

As organisations become more digitally connected, the opportunities for attackers continue to expand. Systems, users, devices, and data are now distributed across multiple environments, creating more entry points than businesses have traditionally had to manage.

At the same time, cyber attacks are becoming more sophisticated, more targeted, and much harder to detect using traditional approaches that rely heavily on prevention alone.

At Manux Solutions, we work with New Zealand businesses that are dealing with this shift every day. Understanding what cyber attacks are, why they are increasing, and how to respond is now essential for any business looking to reduce risk and maintain control.

The problem

Business operations today rely heavily on digital systems. What were once internal systems are now connected to cloud platforms, external services, remote users, and multiple devices.

Employees are working across offices, homes, and remote locations, accessing systems and data from different networks. Every connection point increases exposure, particularly in New Zealand, where flexible and hybrid working models have become standard across many organisations.

A cyber attack is any attempt to gain unauthorised access to systems, disrupt operations, or steal data. These attacks take many forms, but modern attacks often combine multiple methods to increase their chances of success. (Source: WatchGuard Cyber Attack Guide)

Common types of cyber attacks

Malware and Ransomware

Malware is one of the most common entry points for cyber attacks. It is software designed to damage systems, steal data, or gain unauthorised access, and includes viruses, trojans, spyware, keyloggers, and worms. In practice, malware is often introduced through email attachments, compromised websites, malicious downloads, or unpatched software vulnerabilities.

Ransomware sits at the more advanced and damaging end of this category. It is one of the highest impact forms of cyber attack that businesses face today, particularly when combined with data theft.

Modern ransomware attacks are no longer just about encrypting files and demanding payment. They are often multi-stage intrusions where attackers gain access, move through systems, escalate privileges, extract sensitive data, and then deploy ransomware as the final step.

This means ransomware is not just about disruption. It is also about data theft and extortion, which have become a growing concern for New Zealand businesses following a number of high-profile incidents.

WatchGuard shows how malware and ransomware techniques continue to evolve as attackers look for new ways to bypass controls and monetise access. (Source: WatchGuard Internet Security Report)

Social Engineering and Phishing

Social engineering is one of the most effective types of cyber attack because it targets human behaviour rather than technical vulnerabilities. While systems can be hardened, people are still required to make quick decisions, which creates opportunities for attackers to exploit.

These attacks manipulate trust, urgency, or authority to influence behaviour. Rather than forcing access, attackers rely on convincing someone to provide it.

Phishing is the most common form of social engineering and remains one of the primary causes of cyber incidents in New Zealand. These attacks often appear to come from trusted sources such as banks, vendors, or internal teams, and typically encourage users to click links, open attachments, or enter credentials. (Source: NCSC Q1 2025 Cyber Security Insights)

Most successful breaches involve a human element. From what we see working with New Zealand businesses, attackers do not always need to break through technical controls if they can persuade someone to let them in.

Attackers are also using AI to make these attacks more convincing. Emails are becoming more realistic, personalised, and harder to detect, while voice-based attacks can mimic executives or colleagues.

Identity-Based Attacks

Identity-based attacks are among the most difficult types of cyber attacks to detect because they rely on legitimate access rather than an obvious intrusion.

Instead of breaking into systems, attackers obtain valid login credentials and use them to access systems as authorised users. Once inside, they can move through systems, access sensitive data, and escalate privileges without raising immediate alerts.

Common techniques include credential stuffing, session hijacking, and account takeover. While the methods vary, the outcome is the same. Attackers gain trusted access and use it to operate undetected.

This is a growing issue for New Zealand organisations as more businesses adopt cloud platforms and centralised identity systems, where a single compromised account can provide access to multiple systems.

Denial-of-Service and Distributed Denial-of-Service Attacks

Denial-of-Service attacks are focused on disruption rather than data theft. They are designed to make systems or services unavailable by overwhelming them with traffic and exhausting available resources.

In a DoS attack, a single source floods a target with requests. In a DDoS attack, multiple compromised devices generate traffic from many sources at once, making the attack harder to block and more effective overall.

For New Zealand businesses that rely on online systems, even short outages can affect revenue, productivity, customer experience, and trust. In some cases, DDoS attacks are also used as a distraction while more serious activity takes place elsewhere in the environment.

New Zealand’s NCSC provides specific guidance for organisations preparing for and mitigating denial-of-service incidents, including the importance of planning ahead, deploying protections, and ensuring teams are ready to respond quickly. (Source: NCSC Preparing for and Mitigating Denial-of-Service Incidents)

Spoofing and Man-in-the-Middle Attacks

Spoofing is a technique used to make malicious activity appear legitimate. It may involve fake emails, fraudulent websites, or DNS manipulation that redirects users without their knowledge. These techniques are often combined with phishing or credential-based attacks to increase their effectiveness.

Man-in-the-Middle attacks focus on intercepting communication between two parties without their knowledge. This allows attackers to monitor, capture, or alter data in transit. A common example is Wi-Fi eavesdropping, where attackers create fake wireless networks that appear legitimate and use them to capture sensitive information.

Both techniques are designed to exploit trust. They can be difficult to detect without strong controls, particularly in public, shared, or poorly secured network environments.

Across all these attack types, one thing is consistent. Modern cyber attacks are layered, coordinated, and designed to exploit gaps across people, systems, and processes.

The impact

When cyber attacks are not properly addressed, the consequences extend far beyond a single incident. What begins as a clicked link, exposed password, or infected device can quickly become a wider issue affecting systems, users, customer information, and day-to-day operations.

This is one of the reasons cyber attacks are so disruptive. They rarely stay contained to one place if they are not detected and managed early. Attackers often use initial access as a starting point, moving through an environment and looking for higher-value systems or data.

The most common impacts include:

• Operational disruption that slows or halts business activity
• Data loss or exposure of sensitive information
• Financial cost from downtime, recovery, investigation, or extortion
• Regulatory and compliance risk
• Reputational damage and loss of customer trust

For New Zealand businesses, reputational damage can be particularly significant. Many organisations operate within close customer, supplier, and community networks where trust is a major part of doing business. A cyber incident can affect how customers, partners, and stakeholders view the organisation long after systems have been restored.

Many attacks are also not immediately visible. Attackers can remain inside environments for extended periods, increasing the scale of impact before being detected. This makes visibility, monitoring, and response capability critical.

Why cyber attacks are increasing

Cyber attacks are growing in both volume and sophistication, and this trend is continuing across both global markets and within New Zealand. This is not just because attackers are becoming more advanced. It is also because the way businesses operate has changed.

Most organisations now rely on a mix of cloud platforms, remote access tools, mobile devices, third-party applications, and connected systems. Each of these tools can improve productivity, but they also increase the number of places attackers can target.

Remote and hybrid ways of working have also changed the security boundary. Staff are no longer only accessing systems from a controlled office network. They may be working from home, shared spaces, client sites, or public networks, often across multiple devices.

At the same time, cybercrime has become more accessible. Attackers no longer need to build every tool or technique themselves. Automated attack methods and widely available cybercrime tools allow threat actors to target large numbers of organisations quickly.

New Zealand is not isolated from these trends. Smaller markets can be seen as accessible targets, particularly where organisations have valuable data but fewer dedicated cybersecurity resources. Attackers are often looking for the easiest path to access, not necessarily the largest organisation. (Source: NCSC Cyber Threat Report 2025)

The shift in approach

Cybersecurity has evolved in response to these challenges. Traditional approaches focused heavily on prevention, with the goal of blocking threats before they reached the business.

Prevention is still important, but it is no longer enough on its own. Modern environments are too distributed, and modern attacks are too varied, for businesses to rely only on keeping threats out.

A modern approach places greater emphasis on visibility, detection, and response. Businesses need to understand what is happening across users, devices, systems, and data so they can identify activity that does not match expected behaviour.

A stronger cybersecurity approach focuses on:

• Visibility across systems, users, and devices
• Detection of suspicious or unusual behaviour
• Fast response to contain threats before they spread
• Ongoing improvement as threats and business environments change

This shifts cybersecurity from a reactive model to a more proactive one. It is no longer just about stopping threats at the first point of contact. It is about recognising when something is not right and acting quickly enough to reduce the impact.

The role of Security Awareness Training

Many cyber attacks begin with a single action that creates an entry point for attackers. A clicked link, a downloaded file, or a reused password can be enough to expose a business to wider risk.

This is why Security Awareness Training plays an important role in reducing cyber risk. When employees understand the threats they are likely to encounter, they are better equipped to recognise suspicious activity, pause before acting, and report concerns early.

Security awareness is not about blaming users. It is about giving people the knowledge and confidence to become part of the organisation’s defence.

Read more in our Security Awareness Training blog.

How to strengthen your defence

Protecting your business requires a layered and coordinated approach that considers people, systems, and processes together. No single tool or control can address every risk, especially when cyber attacks are designed to exploit multiple weaknesses across an environment.

A strong defence starts with visibility. Businesses need to understand what systems they have, who has access to them, how data is being used, and where the most important risks sit. Without this visibility, it becomes difficult to detect suspicious activity or respond effectively when something changes.

Detection and response are equally important. Traditional controls may identify known threats, but modern attacks often involve compromised accounts, new techniques, or activity that does not immediately appear malicious. The difference between a contained issue and a major disruption often comes down to how quickly the business can respond.

For most organisations, strengthening defence means focusing on:

• Clear visibility across the environment
• Strong identity and access controls
• Detection of known and unknown threats
• User awareness and practical training
• Incident response planning and support
• Ongoing monitoring and improvement

The goal is not to create unnecessary complexity. The goal is to build a security posture that gives the business more control, better awareness, and greater confidence in its ability to manage cyber risk.

How Manux supports your business

At Manux Solutions, we help New Zealand businesses take a practical and effective approach to cybersecurity based on the real risks they are facing.

We work with organisations to assess their environment, identify gaps, and strengthen the areas that matter most. This includes improving visibility across systems and users, implementing intelligent threat detection, supporting stronger identity and access controls, and helping businesses respond quickly when issues occur.

Our approach is built around practical outcomes. That means helping businesses reduce risk, improve resilience, and maintain control without adding unnecessary complexity. Whether an organisation is reviewing its current security posture, responding to a specific concern, or looking to strengthen its long-term approach, we help create a path forward that is clear, manageable, and aligned to the business.

Final thought

Cyber attacks are not a future risk. They are happening now, and they are affecting businesses across all sectors and sizes.

This does not mean eliminating every risk. No business can do that completely. It means understanding where the risks are, strengthening the right areas, and ensuring there is a plan in place to detect and respond when something does not look right.

The organisations that take this approach are better positioned to reduce disruption, protect data, maintain customer trust, and recover faster when incidents occur. Cybersecurity is no longer just a technical issue. It is a core part of business resilience.

Take the next step

If you are reviewing your current security approach or want to better understand your exposure, Manux Solutions can help.

We can work with you to assess your environment, identify key risks, and recommend practical steps to strengthen your cybersecurity posture.

Get in touch with the Manux Solutions team to start the conversation.