From a flurry of assaults concentrating on UK retailers to campaigns corralling end-of-life routers into botnets, it is a wrap on one other month full of impactful cybersecurity information
30 Could 2025
It is that point of month once more when ESET Chief Safety Evangelist Tony Anscombe gives his tackle a number of the most impactful cybersecurity information of the previous 30 or so days. This is a number of what stood out to him in Could 2025:
a warning from Google that Scattered Spider, the hacking gang that orchestrated current assaults at high-street UK retailers, is now turning their sights to US firms,
earlier in Could, Marks & Spencer confirmed that some buyer information was stolen within the flurry of assaults on UK retailers, which had brought on M&S to cease taking on-line orders,
cyber-insurance supplier Coalition introduced that enterprise electronic mail compromise (BEC) assaults and fund switch fraud (FTF) accounted for 60% of the claims final 12 months whereas ransomware remained “the most expensive and disruptive sort of cyberattack”,
the FBI warning about malware that targets end-of-life routers in a bid to corral them right into a botnet,
Coinbase expects the invoice from a current cyberattack to achieve as much as US$400 million.
Remember to take a look at the April 2025 version of Tony’s month-to-month safety information roundup for extra insights.
