Privilege Escalation in Small Business
Holiday Cybersecurity is a Solomon IT series for owners and managers who need the threat explained in plain language. Chapter 5 is about access. Attackers rarely begin with the CEO or the finance system. They begin with whoever is easiest to reach. Then they climb.
In this chapter, Sean and Zach walk through that climb from a hacker’s point of view. A salesperson, a frontline worker, or a home computer on the same Wi-Fi as a work laptop can be the first door. Once that door is open, the goal is privilege escalation: more accounts, more systems, then payroll, vendors, or a larger partner network. Small shops that are excellent at their trade and light on security are often easier to enter than a large firm with policies and monitoring. Remote work raises the same problem. A home network, a coffee shop, or a personal browser can become the path into a work account.
The conversation also covers supply-chain risk. A local manufacturer, a CPA firm, or another vendor may not be the prize. They may be the hallway into a larger customer. Two-factor authentication still matters, and Solomon applies it across roles instead of carving out exceptions for busy executives. It is not enough by itself. A drive-by browser change, a keylogger, and a remote access Trojan can steal a session cookie so an attacker reuses an already approved login. Traditional antivirus is described as insufficient. Endpoint detection and response watches behavior on the device. For home machines, the chapter names examples such as Panda, Webroot, Vipre, and Sophos, and it tells viewers to audit browser extensions for anything they did not mean to install.
Watch the video, then use the takeaways below as a short checklist. If you want a second set of eyes on access, MFA, and endpoint coverage, request a free IT assessment.
Key takeaways
Attackers look for access first, not the highest title. A salesperson, a line worker, or a home PC can be the entry point.
Privilege escalation is the next step: move from a low-privilege account toward administrators, finance, or partner systems without being noticed.
Small businesses that are strong in their trade and weak on firewalls, policies, and endpoint tools are easier to enter than many larger firms.
Home Wi-Fi, public Wi-Fi, and personal computers used for work can put a work account on the same path as an unsecured household device.
Two-factor authentication should apply to every role, including owners. Session cookies and remote access Trojans can still steal an approved login, so MFA is not the whole control.
Use endpoint detection and response instead of relying on traditional antivirus. Review browser extensions in Edge, Chrome, Firefox, and Safari and remove anything you did not intend to install.