From a flurry of assaults concentrating on UK retailers to campaigns corralling end-of-life routers into botnets, it is a wrap on one other month crammed with impactful cybersecurity information
30 Might 2025
It is that point of month once more when ESET Chief Safety Evangelist Tony Anscombe gives his tackle a few of the most impactful cybersecurity information of the previous 30 or so days. Here is a number of what stood out to him in Might 2025:
- a warning from Google that Scattered Spider, the hacking gang that orchestrated latest assaults at high-street UK retailers, is now turning their sights to US corporations,
- earlier in Might, Marks & Spencer confirmed that some buyer knowledge was stolen within the flurry of assaults on UK retailers, which had induced M&S to cease taking on-line orders,
- cyber-insurance supplier Coalition introduced that enterprise e mail compromise (BEC) assaults and fund switch fraud (FTF) accounted for 60% of the claims final yr whereas ransomware remained “the most expensive and disruptive kind of cyberattack”,
- the FBI warning about malware that targets end-of-life routers in a bid to corral them right into a botnet,
- Coinbase expects the invoice from a latest cyberattack to achieve as much as US$400 million.
Do not forget to take a look at the April 2025 version of Tony’s month-to-month safety information roundup for extra insights.