Literature Review: Cybersecurity Threat Trends in Micro, Small, and Medium Enterprises (MSMEs) in the Digital Era

Abstract

Digital transformation provides operational convenience and market expansion for Micro, Small, and Medium Enterprises (MSMEs), but at the same time triggers an increase in exposure to cyber security threats. This study aims to map the cyber security threat trends in the MSME ecosystem, identify fundamental factors driving vulnerability, and formulate applicable mitigation strategies. Using a descriptive qualitative literature review approach, this study synthesizes various journal articles from academic databases to evaluate the current digital threat landscape. The analysis results show that social engineering (phishing) and data-hijacking software (ransomware) are the most dominant attack vectors in this sector. Architecturally, the main vulnerability of MSMEs is not purely caused by technological factors, but rather triggered by limited financial resources, the absence of information technology (IT) expert personnel, and the low level of digital literacy (cyber hygiene) among workers. The impact of cyber security incidents is proven to not only cause instant material losses, but also potentially paralyze operations totally and destroy brand reputation. Therefore, this study recommends a paradigm shift in cyber defense at the MSME level, moving from expensive hardware infrastructure investments to the implementation of behavior-based mitigation, such as the adoption of Two-Factor Authentication (2FA) and data backup routines.