eSecurity Planet

MARCH 14, 2025

First detected in December 2024 and persisting into early 2025, the threat targets hospitality organizations across North America, Oceania, Asia, and Europe. A recent phishing campaign has raised alarms among cybersecurity professionals after it impersonated Booking.com to deliver a suite of credential-stealing malware.

Phishing 65

Phishing Malware Social Engineering Authentication 65

Thales Cloud Protection & Licensing

DECEMBER 16, 2024

Data Security Predictions for 2025: Putting Protection and Resilience at Center Stage madhav Tue, 12/17/2024 - 08:10 Cybersecurity is a remarkably dynamic industry. Protecting data, the driving force of modern businesses, will continue to be the primary focus of organizations throughout 2025.

Data privacy 113

Data privacy Risk Technology Social Engineering 113

Jane Frankland

FEBRUARY 7, 2025

The World we Now Live in In January this year, the World Economic Forum released the Global Cybersecurity Outlook 2025 to highlight key trends shaping economies and societies in 2025. On the one hand, AI is helping detect and prevent cyber-attacks through advanced threat detection and response capabilities.

Cyber Risk 130

Cyber Risk CISO Risk Encryption 130

Jane Frankland

MAY 3, 2025

Allegedly orchestrated by the same group known as Scattered Spider, these attacks highlight the significant challenges even the most respected and established brands face in defending against modern cyber threats. On one hand, AI enhances security by enabling faster threat detection, predictive analytics, and automated responses.

Cyber Attacks 100

Cyber Attacks Retail Cyber threats Backups 100

Andrew Hay

DECEMBER 10, 2024

As we approach 2025, the ever-evolving landscape of cybersecurity continues to challenge professionals and organizations alike. AI-Powered Threats and Defenses The ubiquity of artificial intelligence in cybersecurity is inevitable. In 2025, adversaries will use AI more effectively to bypass traditional defences.

Cybersecurity 52

Cybersecurity IoT Artificial Intelligence Social Engineering 52

SecureList

MARCH 25, 2025

The attackers employed social engineering techniques to trick victims into sharing their financial data or making a payment on a fake page. We analyzed phishing detections separately for users of our home and business products. in 2024, there is every chance Amazon will retain its dubious honor into 2025.

Phishing 82

Phishing Banking Scams Mobile 82

eSecurity Planet

APRIL 30, 2025

The RSA Conference 2025, held in San Francisco from April 28 to May 1, spotlighted the evolving landscape of cybersecurity, with a strong emphasis on artificial intelligence, identity security, and collaborative defense strategies. This years theme (Many Voices. Protection against deepfakes, fraud, outages, and AI-based impersonation.

Cybersecurity 62

Cybersecurity Mobile Artificial Intelligence Phishing 62

Security Boulevard

FEBRUARY 10, 2025

Threat actors will widely adopt AI to craft more sophisticated phishing schemes and advanced techniques in 2025. For example, they are shifting toward AI-driven social engineering attacks aimed at mobile users that exploit passkey and biometric authentication methods.

Phishing 64

Phishing Mobile Encryption Social Engineering 64

Security Boulevard

JANUARY 29, 2025

Top ransomware predictions for 2025Prediction 1: AI-powered social engineering attacks will surge and fuel ransomware campaignsIn 2025, threat actors will increasingly use generative AI (GenAI) to conduct more effective social engineering attacks. A top emerging AI-driven trend is voice phishing (vishing).

Ransomware 59

Ransomware Social Engineering Architecture Risk 59

Digital Shadows

JANUARY 14, 2025

Key Findings The last quarter of 2024 proved to be a pivotal period for ransomware activity, marked by emerging threats and unexpected shifts among established groups. Take Action Its realistically possible that the success of new ransomware groups in Q4 2024 will inspire a wave of fresh operations in 2025.

Ransomware 126

Ransomware Social Engineering Phishing VPN 126

Security Boulevard

DECEMBER 16, 2024

Data Security Predictions for 2025: Putting Protection and Resilience at Center Stage madhav Tue, 12/17/2024 - 05:10 Cybersecurity is a remarkably dynamic industry. Protecting data, the driving force of modern businesses, will continue to be the primary focus of organizations throughout 2025.

Data privacy 52

Data privacy Risk Encryption Digital transformation 52

SecureList

APRIL 21, 2025

Among these threats, Lumma Stealer has emerged as a particularly sophisticated player since its introduction in 2022 by the threat actor known as Lumma. As of March 2025, its presence on dark web marketplaces and Telegram channels continues to grow, with over a thousand active subscribers. com bot-detection-v1.b-cdn[.]net

Malware 87

Malware Cryptocurrency Software Phishing 87

Security Boulevard

JULY 30, 2024

The use of voice-based social engineering to gain entry into networks is on the rise—a technique made popular by Scattered Spider and the Qakbot threat group. It can also help find and stop possible attackers from moving around through identity threat detection and response (ITDR) and deception capabilities.

Ransomware 97

Ransomware Architecture Social Engineering Risk 97

Security Boulevard

APRIL 1, 2025

They might generate exploits for 0-day vulnerabilities faster, or figure out multi-step social engineering ploys that slip past automated scanners. Mitre Att&ck as Context | by Evan Powell | DeepTempo | Feb, 2025 | Medium ), meaning we should expect an exponential increase in the diversity of attack techniques.

Risk 52

Risk Internet Internet Cybersecurity 52

eSecurity Planet

JANUARY 18, 2024

This integration ensures that the storage environment is capable of detecting, preventing, and recovering from ransomware assaults, which contributes to the overall resilience of stored data. Gartner predicts that by 2025, 60% of organizations will require integrated ransomware defense strategies on storage devices, up from 10% in 2022.

Risk 125

Risk Backups Encryption DDOS 125

Digital Shadows

NOVEMBER 26, 2024

This underscores the importance of having additional compensating controls and educating employees on the risks associated with phishing and other social engineering attacks. By leveraging our expertise in interacting with threat actors, we gained valuable insights into their intentions.

Cyber Attacks 59

Cyber Attacks Phishing Ransomware Cyber Insurance 59

Security Boulevard

OCTOBER 18, 2024

The most common types of attacks were social engineering; malware; denial of service; and compromise of unpatched systems.

Cybersecurity 69

Cybersecurity CISO CSO Risk 69

Digital Shadows

OCTOBER 29, 2024

Among these experienced affiliates is the “Scattered Spider” group, known for its custom tools and advanced social engineering skills, which helped RansomHub become the most active ransomware group in Q3 2024 (see Figure 1). Set up alerts via network monitoring tools for unusual patterns of data exfiltration and C2.

Ransomware 88

Ransomware Encryption Technology Malware 88

Digital Shadows

OCTOBER 29, 2024

Among these experienced affiliates is the “Scattered Spider” group, known for its custom tools and advanced social engineering skills, which helped RansomHub become the most active ransomware group in Q3 2024 (see Figure 1). Set up alerts via network monitoring tools for unusual patterns of data exfiltration and C2.

Ransomware 52

Ransomware Encryption Technology Malware 52

Digital Shadows

NOVEMBER 26, 2024

This underscores the importance of having additional compensating controls and educating employees on the risks associated with phishing and other social engineering attacks. By leveraging our expertise in interacting with threat actors, we gained valuable insights into their intentions.

Cyber Attacks 52

Cyber Attacks Phishing Ransomware Cyber Insurance 52

SecureWorld News

DECEMBER 27, 2024

While the latter is more of a good thing, all of these are realities and none of the three will go away in 2025. We curated some predictions for the cybersecurity industry in 2025--some specific; some broad; some from practitioners; some from vendors--to get a pulse on what the cybersecurity community believes is coming in the New Year.

Cybersecurity 123

Cybersecurity Education Risk CISO 123

Jane Frankland

JANUARY 12, 2025

Cybersecurity is on the brink of significant transformation as we approach 2025, grappling with escalating complexities driven by advancements in technology, increasing geopolitical tensions, and the rapid adoption of AI and IoT. Ransomware remains a prominent threat, but the methods have evolved. But it doesnt stop there.

Cybersecurity 130

Cybersecurity CISO Insurance IoT 130