Attacks move downstream

In the past few decades, attackers in cyberspace, be they nation-states or criminal organizations, were typically focused primarily on targeting the larger enterprises of the world. This was because of the "bang for their buck" that they were able to achieve as they often gained millions, or at least hundreds of thousands, of records when they managed to exploit a network of that magnitude. This was fine for the attacker, as they could basically continue to target one large enterprise after another, and there was almost always an easy way to gain access. Those opportunities have somewhat dried up thanks to the efforts and investments made by those large enterprises and governments. This means that those easy, large-yield targets are now more difficult to exploit, and so the adversary has now changed their strategy and tactics to aim their efforts toward other targets. In cyberspace, this means a move from large enterprise and government exploit...