Italian SME Executives Targeted by Cyberattacks but Lack Awareness of Systemic Risks

Italian SME (Small and Medium Enterprise) executives are the preferred targets of cyberattacks but remain largely unaware of this systemic risk. The lack of security awareness among leadership exacerbates vulnerabilities, particularly in compliance with regulations like GDPR and NIS2. Common threats include phishing, ransomware, and data breaches, with attackers often exploiting weak passwords and unpatched vulnerabilities. The article underscores a gap between basic security awareness and the necessity for structured security education for decision-makers. No specific technical details, attack dates, or CVE IDs are provided. The issue is presented as a structural challenge requiring the involvement of certified cybersecurity professionals.