- July 8, 2025
- Tech News
Iranian Cyber Threats Escalate
- July 1, 2025
- Tech News
Massive Credential Leak
- June 30, 2025
- Tech News
AI-Driven Managed Services
July 2025
Marks & Spencer Discloses Cyberattack by Criminal Gangs
Retail giant Marks & Spencer (M&S) revealed that a severe cyberattack disrupting its operations for six weeks was carried out by hacker groups "Scattered Spider" and Asia-based ransomware operator "DragonForce." The breach began on April 19, 2025, significantly impacting automated warehouse operations and leading to a 5% drop in share prices. M&S is now enhancing its cybersecurity measures to prevent future breaches.
Source : www.thescottishsun.co.uk
Qantas Investigates Data Breach Affecting Millions
Qantas Airways confirmed a data breach impacting up to six million customers, stemming from unauthorized access to a third-party system linked to a Qantas contact center. The breach involved the theft of personal customer data, including names and contact information. Australia's privacy watchdog has noted a rise in social engineering attacks, particularly "vishing," where cybercriminals impersonate employees to deceive IT help desks and bypass security protocols.
Source : www.theguardian.com
AI-Driven Impersonation Targets U.S. Officials
The U.S. State Department issued a warning about attempts to impersonate Secretary of State Marco Rubio and other officials using AI technology. An AI-driven impostor posing as Rubio attempted to contact foreign ministers, a U.S. senator, and a governor through various communication channels. While the messages were ultimately unsuccessful, the incidents raise growing concerns about the use of artificial intelligence in compromising information security.
Source : www.apnews.comJune 2025
Iranian Cyber Threats Escalate
In June 2025, U.S. national security agencies, including the NSA, CISA, FBI, and DC3, issued urgent advisories about an anticipated wave of cyberattacks by Iran-linked hacking groups targeting American critical infrastructure. These attackers are especially focused on organizations with ties to Israeli defense and research sectors. The campaign has employed phishing emails, credential harvesting, and the exploitation of unpatched systems to gain unauthorized access. Authorities have called on companies in sectors like energy, healthcare, and technology to tighten security controls and prepare for potentially coordinated and disruptive attacks.
Source : www.nsa.gov
Scattered Spider Targets Aviation
The cybercriminal group “Scattered Spider,” known for their high-profile breaches of MGM Resorts and Caesars Entertainment in 2023, has re-emerged with a new focus on the airline industry. Using advanced social engineering techniques, including deepfake audio impersonations of internal IT staff, the group has succeeded in breaching airline IT systems. Investigators warn that the attackers trick help desks and technical teams into resetting credentials or granting unauthorized access. In response, the FBI issued a broad advisory recommending stricter access controls, employee verification protocols, and enhanced internal cybersecurity awareness training.
Source : www.csoonline.com
LapDogs Espionage Campaign
A newly exposed cyber espionage campaign, dubbed “LapDogs,” has been attributed to China-aligned threat actors and has affected over 1,000 devices across strategic regions including the U.S., Japan, South Korea, Taiwan, and Hong Kong. The operation utilized malicious browser extensions and USB drop techniques to infiltrate targets in the telecom, semiconductor, and government sectors. Security analysts believe the attackers aimed to collect sensitive trade secrets and state intelligence. The scale and precision of the campaign have heightened concerns about state-sponsored cyber surveillance across Asia-Pacific and allied nations.
Source : www.securityscorecard.com
Healthcare Data Breach
A major U.S. healthcare system disclosed a devastating data breach in June 2025 that exposed the personal records of approximately 5.4 million patients. The breach originated from a vulnerability in outdated PACS (Picture Archiving and Communication System) imaging software, which had not been patched in time. Exposed data included patients’ medical histories, insurance details, and Social Security numbers. Legal experts predict a wave of class-action lawsuits, and the breach has triggered investigations from HIPAA enforcement agencies. The incident underscores the urgent need for improved software lifecycle management in healthcare IT infrastructure.
Source : www.healthcaredive.comn