Black Arrow Cyber Threat Intelligence Briefing 21 March 2025:

-Why Cyber Security Needs More Business-Minded Leaders

-Cyberwashing Exposes Businesses and Consumers to Cyber Risks, Study Warns

-New KnowBe4 Report Reveals a Spike in Phishing Campaigns

-Over 400 million Unwanted and Malicious Emails Were Received by Businesses in 2024

-The Psychology of Scams: How Cyber Criminals Are Exploiting the Human Brain

-Many Workers Are Overconfident at Spotting Phishing Attacks

-Russia Using Criminal Networks to Drive Increase in Sabotage Acts, Says Europol

-AI Will Make Ransomware Even More Dangerous

-Third of UK Supply Chain Relies on ‘Chinese Military’ Companies

-How Economic Headwinds Influence the Ransomware Ecosystem

-Malicious Android ‘Vapor’ Apps on Google Play Installed 60 million Times

-Moving Beyond Checkbox Security for True Resilience

Black Arrow Cyber Threat Intelligence Briefing 14 March 2025:

-95% of Data Breaches Tied to Human Error in 2024

-Hackers Using Advanced Social Engineering Techniques with Phishing Attacks

-Confidence Gap in Cyber Security Leaves Businesses at Risk

-Over Half of UK Organisations Experienced a Security Breach Resulting from Third-Party Access in the Past Year

-Ransomware Gang Encrypted Network from a Webcam to Bypass Security Controls

-Microsoft Reveals Over a Million PCs Hit by Malvertising Campaign

-How Cyber Attacks Affect Your Staff

-UK Government Officials: The UK Is Unprepared and Vulnerable to Russian Cyber Attacks.

-Navigating AI-Powered Cyber Threats in 2025: 4 Expert Security Tips for Businesses

-86% of Financial Firms are Still Not Fully Compliant With DORA

-The CISO as Business Resilience Architect

-Data Breach at Japanese Telecom Giant NTT Hits 18,000 Companies

Black Arrow Cyber Advisory 12 March 2025 – Security Updates from Microsoft, Fortinet, Apple, Adobe, Zoom and SAP

Black Arrow Cyber Threat Intelligence Briefing 07 March 2025:

-Cyber Security's Future Is All About Governance, Not More Tools

-'Cocktail of Cyber-Risk' Should Stir Concerns Among CISOs

-Why Cyber Drills are as Vital as Fire Drills

-Nonprofits Face Surge in Cyber-Attacks as Email Threats Rise 35%

-Rising Cyber Threats in Europe’s Financial Sector: An ENISA Overview

-Old Unpatched Vulnerabilities Among the Most Widely Exploited

-Chinese State Back Threat Actor ‘Silk Typhoon’ Shifted to Specifically Targeting Outsourced IT Providers

-Social Engineering and Stolen Credential Threats Continue to Dominate Cyber Attacks

-Security CEOs Warn Your Voicemail Greeting is the Latest Target for Cyber Criminals

-Would-be Extortionists Send “BianLian” Ransom Notes in the Mail

-Cyber Threat Highest It’s Ever Been, Ex-Five Eyes Leader Warns

-Trump Administration Retreats in Fight Against Russian Cyber Threats

Black Arrow Cyber Threat Intelligence Briefing 28 February 2025:

-Cyber Security's Biggest Blind Spot - Third-Party Risk

-Cyber Criminals Can Now Clone Any Legitimate Website, and It’s Pretty Terrifying

-Over 25 New Malware Variants Created Every Single Hour

-Understanding MFA Fatigue: Why Cyber Criminals Are Exploiting Human Behaviour

-Only a Fifth of Ransomware Attacks Now Encrypt Data

-Biggest Crypto Heist in History, Worth $1.5Bn, Linked to North Korea Hackers

-89% of Enterprise GenAI Usage is Invisible to Organisations, Exposing Critical Security Risks

-Combating Deepfakes in Financial Services: A Call to Action

-Threat Actors Are Increasingly Trying to Grind Business to a Halt

-With AI and Automation, Hackers are Stealing Data at Unprecedented Speeds

-Mobile Phishing Attacks on the Rise

-With Millions Upon Millions of Victims, Scale of Info-Stealer Malware Laid Bare

Black Arrow Cyber Threat Intelligence Briefing 14 February 2025:

-Supply Chain Cyber Attacks Surge Over 400%, Expected to Continue Rising

-98% of Business Leaders Can't Spot a Phishing Scam

-Two-Thirds of UK Businesses Still Failing on Cyber Security

-44% of Middle-Market Firms Invest in Cyber Crime Protection

-A Deepfake Epidemic Is Coming: People Are Simply Not Good Enough at Identifying Fakes

-Cyber Security Gaps Exposed as 96% of S&P 500 Firms Hit by Data Breaches

-Cyber Criminals Shift Focus to Social Media as Attacks Reach Historic Highs

-Is a Lack of Supply Chain Visibility Undermining Board-Level Confidence in Cyber Security Programs?

-Ransomware Gangs Extort Victims 17 Hours After Intrusion on Average

-Over 330 million Credentials Compromised by Infostealers

-Mobile Phishing Attacks Surge, Accounting for 16% of Phishing Incidents

-Phishing-as-a-Service (PhaaS) Can Now Auto-Generate Phishing Kits for Any Brand

-This Open Text-to-Speech Model Needs Just Seconds of Audio to Clone Your Voice

Black Arrow Cyber Threat Intelligence Briefing 14 February 2025:

-Russian State Threat Group Shifts Focus to US, UK Targets

-Majority of Businesses Expect a Cyber Breach in 2025

-The Hidden Cyber Threat Lurking in Your Supply Chain

-Cyber Resilience: A C-Suite Game Plan for Balancing Innovation, Compliance and Risk

-NIS2: the GDPR of Cyber Security

-Hackers Ramp Up Efficiency, Speed, and Scale in 2024, Targeting Business of All Sizes

-Number of Active Dark Web Ransomware Groups Up 38% in 2024

-Nation State Hackers Want in on the Ransomware Action – Ransomware Isn’t Always About the Money: Government Spies Have Objectives, Too

-Enterprises Under Growing Pressure to Demonstrate Readiness for Cyber Threats

-Cyber Criminals Exploit Valentine’s Day with Romance Scams, Phishing Attacks

-The UK’s Secret iCloud Backdoor Request Raises Concerns from Critics

Black Arrow Cyber Advisory 12 February 2025 – Microsoft, Adobe, Fortinet, Apple, Ivanti, OpenSSL, SAP, Zyxel, Intel, AMD & Nvidia Security Updates

Black Arrow Cyber Threat Intelligence Briefing 07 February 2025:

-Destructive Attacks on Financial Institutions Surge

-AI, Cyber Crime Perceived as Top Insurance Risks

-Ransomware Victims Increased by 26% in 2024

-Over 60 Percent of Enterprise Cyber Security Incidents Relate to Known Risks

-CISOs Drive the Intersection between Cyber Maturity and Business Continuity

-Cyber Criminals Entice Traitorous Insiders via Ransom Notes

-Phishing Up Almost 50% Since 2021 with AI Attacks on the Rise

-The Cyber-Driven Domino Effect: How Financial and Security Crises Bankrupt Businesses

-Board Directors Are Taking the Lead on Cyber Security Oversight

-Credential-Stealing Malware Surges in 2024

-How Agentic AI will be Weaponised for Social Engineering Attacks

-LinkedIn Has Become a Prime Hunting Ground for Cyber Criminals

Black Arrow Cyber Threat Intelligence Briefing 31 January 2025:

-More Than Half of UK Workplaces Faced Cyber Attacks Last Year

-Cyber Security Responsibilities Across the C-Suite: A Breakdown for Every Executive

-Hackers Use Generative AI to Attack More Frequently and Effectively

-74% of Organisations are Increasing Crisis Simulation Budgets

-Only 13% of Organisations Fully Recover Data After a Ransomware Attack

-Cyber Security Threats Hit Mid-Market Firms Where It Hurts: The Bottom Line

-GhostGPT Can Write Malicious Code, Create Malware, and Create Convincing Phishing Emails for Just $50/Week

-New Phishing Campaign Targets Mobile Devices with Malicious PDFs

-The Clock is Ticking: Hackers Can Take You Down in 48 Minutes

-Security Threats Top Concerns for UK SMEs

-SaaS (Cloud) Breaches Skyrocket 300% as Traditional Defences Fall Short

-Rise of AI is Causing Many Firms to Worry About Their Cyber Security

Black Arrow’s Key Cyber Predictions for 2025

At Black Arrow, we see significant cyber risks escalating in 2025 as attackers’ technology and tactics develop, and geopolitical tensions increase. Our cyber threat intelligence, including our weekly briefing for our newsletter subscribers, shows a sharp rise in attacks during 2024, which continues into 2025. This includes increasingly sinister phishing and other AI-enabled attacks as part of ransomware and extortion, which in some cases lead to the collapse of the victim organisation.

Black Arrow Cyber Threat Intelligence Briefing 24 January 2025:

-Russian Ransomware Groups Deploy Email Bombing and Teams Vishing

-Cyber Security Breaches Are Increasing Business Insolvency Risks

-Companies Seek Specialised Expertise to Combat Artificial Intelligence (AI) Cyber Threats

-When Risk Becomes Habit: Employee Behaviour and Organisational Security

-New GhostGPT AI Chatbot Facilitates Malware Creation and Phishing

-Global Cyber Attacks Jumped 44% Last Year

-Phishing Campaigns Became a Lot More Sinister in 2024

-CISOs Dramatically Increase Boardroom Influence but Many Still Lack Soft Skills

-Bad News - Businesses Who Pay Ransomware Attackers Aren’t Very Likely to Get Their Data Back

-Deepfakes Force a New Era in Fraud Detection, Identity Verification

-Misinformation Is No. 1 Global Risk, Cyber Espionage in Top 5

-Educate, Prepare, and Mitigate: The Keys to Unlocking Cyber Resilience

-What is ‘Security Theatre’ and How Can Firms Move Beyond It?

-SMEs Face Rising Cyber Threats Amid AI and Training Concerns

Black Arrow Cyber Threat Intelligence Briefing 17 January 2025:

-New EU Cyber Rules for Financial Institutions Came into Force on Friday 17 January

-Cyber Attacks Considered Top Business Concern for 2025: Allianz

-How CISOs Can Elevate Cyber Security in Boardroom Discussions

-Cyber Security is Stepping into a New Era of Complexity

-Ransomware Victim Numbers Hit an All-Time High

-The Current State of Ransomware: Weaponising Disclosure Rules and More

-The Top SME Security Worries for 2025

-What They Don’t Tell You About Cyber Attacks – the Emotional Impact on Staff

-The Hybrid Workforce Crisis: How it has Weakened Enterprise Security, and What to Do About It

-New Ransomware Group Uses AI to Develop Nefarious Tools

-'Arson, Sabotage, Cyber Attacks': UK Enters New Era of Threats from Hostile States

-NATO Launches New Mission to Protect Crucial Undersea Cables

Black Arrow Cyber Advisory 15 January 2025 – Microsoft, Adobe, Cisco, Ivanti, Fortinet, GitHub, SAP, SonicWall and Zyxel Security Updates

Black Arrow Cyber Threat Intelligence Briefing 10 January 2025:

-Phishing Click Rates Triple in 2024

-What Boards Need to Know on Digital and Cyber Security Governance In 2025

-Only 26% of Europe’s Top Companies Earn a High Rating for Cyber Security

-Breach Readiness: Elevating Your Security Posture in a Constantly Evolving Threat Landscape

-Ransomware Shock: $133 Million Paid, 195 Million Records Compromised

-Operational Incident Reporting: UK Financial Regulators Propose New Rules

-Insider Threat: Tackling the Complex Challenges of the Enemy Within

-The Big Question: Are Businesses Now in the Front Line for Cyber Warfare?

-How Cyber Security Jargon Creates Barriers and Wastes Resources

-Scammers Exploit Microsoft 365 to Target PayPal Users

-Five Ways to Make Cyber Security Resilience More Than Just a Buzzword

-Meet the Chinese ‘Typhoon’ Hackers Preparing for War

-The Cyber Security Priorities For 2025: What Leaders Should Focus On

Black Arrow Cyber Threat Intelligence Briefing 03 January 2025:

-Corporate Executives are Being Increasingly Targeted by AI Phishing Scams

-Unconventional Russian Attack Could Cause 'Substantial' Casualties, Top NATO Official Warns

-35 Chrome Extensions Began Stealing People's Data After the Developers Got Phished

-China's Cyber Intrusions Took a Sinister Turn in 2024

-Third Party Risk Management is Critical as DORA and New FCA Rules Come into Effect

-Ransomware 2024: A Year of Tricks, Traps, Wins and Losses

-The Modern CISO is a Cornerstone of Organisational Success

-Ransomware Reality Check: Are You Ready to Face Organised Cyber Crime?

-How Cops Taking Down Ransomware Gangs Led to the Meteoric Rise of Another

-Experts Unsure of Risk Appetite as EU Beefs Up Cyber Rules for Critical Infrastructure

Black Arrow Cyber Threat Intelligence Briefing 27 December 2024:

-Hackers are Using Russian Domains to Launch Complex Document-Based Phishing Attacks

-How Nation-State Cyber Criminals Are Targeting the Enterprise

-Phishing Report Findings Call for a Fundamental Shift in Organisational Approaches to Defence

-Organisations Need to Get Real About Threat of Cyber Attacks

-Dark Web Cyber Criminals are Buying Up IDs to Bypass KYC Methods

-Cl0p Ransomware Group to Name Over 60 Victims of Cleo Attack

-Service Disruptions Continue to Blindside Businesses

-Infostealers Dominate as Lumma Stealer Detections Soar by Almost 400%

-Ransomware Attackers Target Industries with Low Downtime Tolerance

-North Koreans Stole $1.34bn In Crypto This Year

-Beware Of Shadow AI: Shadow IT’s Less Well-Known Brother

-Working with Security Consultants Will Bolster Cyber Resilience as We Enter 2025

Black Arrow Cyber Threat Intelligence Briefing 20 December 2024:

-Mobile Spear Phishing Targets Executive Teams

-From Digital Risk to Physical Threat: Why Cyber Security Must Evolve for Executives

-Why HNWIs are Seeking Personal Cyber Security Consultants

-Ransomware in 2024: New Players, Bigger Payouts, and Smarter Tactics

-Credential Phishing Attacks Up Over 700 Percent

-All Major European Financial Firms Suffer Supplier Breaches

-Phishers Cast Wide Net with Spoofed Google Calendar Invites

-Security Leaders Say Machine Identities Are Next Big Target for Cyber Attack

-Ransomware Defences are Weakened by Backup Technology

-Cyber Security is Never Out-of-Office: Protecting Your Business Anytime, Anywhere

-Ransomware, Deepfakes, and Scams: The Digital Landscape in 2024

-UK Companies Face Increasing Cyber Security Risks Across a Range of Threats

Black Arrow Cyber Threat Intelligence Briefing 13 December 2024:

-Cyber Security Risks Rise During Mergers & Acquisitions

-Ransomware Gangs’ Merciless Attacks Bleed Small Companies Dry

-AI & Cyber Security to Shape the Tech Landscape in 2025

-Phishing: The Silent Precursor to Data Breaches

-Business Cyber Understanding Gap Creates New Vulnerabilities

-Cyber Defence vs Cyber Resilience: Why It's Time to Prioritise Recovery

-UK SMEs Are Concerned About Preparedness for Cyber Attacks as Fraud Rises

-Cyber Risk to Intensify in 2025 as Attackers Switch Tactics

-Companies Pull Company and Board Leadership Bios from Their Websites After Insurance Executive’s Killing

-Boardroom Risks Revealed in Latest Beazley Report

-Employee Visits to Adult or Gambling Sites Doubles Risk of Infection by Malware

-North Korea's Fake IT Worker Scam Hauled in at Least $88 Million Over Six Years