Many SMBs still disable multi-factor authentication to speed things up, but...

https://www.inter-bookmarks.win/in-2026-smbs-risk-data-leaks-from-overly-broad-permissions-given-to-users

Many SMBs still disable multi-factor authentication to speed things up, but that’s a huge risk. Attackers love easy targets. Instead, set up MFA properly and keep it enabled