Network Rail has described facing millions of cyber threats — a figure that captures how relentless and automated the modern threat landscape is. The vast majority of these are not hand-crafted attacks; they’re bots probing continuously for any weakness.
What it means for you
That volume is the point: you don’t have to be a famous target to be attacked constantly. Every internet-facing business is scanned around the clock, which is why a single unpatched system or weak password can be found quickly.
Defending against volume means automation of your own — continuous monitoring, automatic patching, and alerting that flags the genuine threats among the noise. That’s exactly what a managed SOC and vulnerability management give a smaller organisation without needing a 24/7 in-house team.
What “millions of threats” really means
The headline figure is less about one organisation’s notoriety and more about how the modern internet works. The overwhelming majority of these threats are not hand-crafted attacks aimed at a specific victim; they are automated bots probing every reachable address around the clock for a weakness to exploit. That is the uncomfortable truth for smaller organisations: you do not have to be a famous target to be attacked constantly, and a single unpatched system or reused password can be found within hours.
Fighting volume with automation
You cannot meet automated, round-the-clock probing with occasional manual effort; you need automation of your own. Continuous monitoring watches for the genuine intrusions hidden in the noise, regular vulnerability scanning finds weak points before attackers do, and prompt, ideally automated patching closes the doors the bots are testing. This is precisely what a managed security operations centre and vulnerability-management service give a smaller organisation — the equivalent of a 24/7 security team without the cost of building one in-house. We provide exactly that cover for clients.
For a smaller organisation, borrowing that capability is far cheaper than being the weak point a bot happens to find first.
Source: ITPro, July 2026.