Black Arrow Cyber Threat Intelligence Briefing 11 July 2025:

-‘The Worst Thing an Employee Could Do’: Workers Are Covering Up Cyber Attacks for Fear of Reprisal – Here’s Why That’s a Huge Problem

-Employees Are Quietly Bringing AI to Work and Leaving Security Behind

-Qantas Attack Reveals One Phone Call Can Crack Cyber Security’s Weakest Link: Humans

-Financial Firms Are Locking the Front Door but Leaving the Back Open

-Teens Arrested by NCA over Cyber Attacks on M&S, Harrods and Co-Op

-Should UK Companies Be Required to Disclose Major Cyber Attacks? M&S CEO Archie Norman Thinks So

-The Cost of Unpreparedness: Why Many Businesses Lack a Continuity Strategy

-Experts Warn This Top GenAI Tool Is Being Used to Build Phishing Websites

-The Rising Threat of Mobile Malware: How to Protect Your Device in 2025

-Nearly 8,500 Small and Medium Businesses Faced Cyber Attacks Through Fake Downloads and Mimic AI Tools in 2025

-Why Data Sovereignty Is Not Just a Legal Concern but a Cyber Security Imperative

-Whole of Society Must Respond to Threats Bringing ‘War to the Doorstep’, MPs Say

-Businesses at Greater Risk of Cyber Attack Due to Geopolitical Tensions

Black Arrow Cyber Advisory 09 July 2025 – Security Updates from Microsoft, Ivanti, Fortinet, Splunk, Adobe, and SAP

Black Arrow Cyber Threat Intelligence Briefing 04 July 2025:

-Hackers Using PDFs to Impersonate Microsoft, DocuSign, and More in Callback Phishing Campaigns

-You Can’t Trust AI Chatbots Not to Serve You Phishing Pages or Malicious Downloads

-90% Aren’t Ready for AI Attacks, Are You?

-Over 1,000 Small Office Devices Hacked in China-linked LapDogs Cyber Espionage Campaign

-Qantas Confirms Cyber Attack Exposed Records of Up to 6 Million Customers

-Third-Party Breaches Double, Creating Ripple Effects Across Industries

-Automation and Vulnerability Exploitation Drive Mass Ransomware Breaches

-A Group of Young Cyber Criminals Poses the ‘Most Imminent Threat’ of Cyber Attacks Right Now

-Scam Centres Expand Global Footprint with Trafficked Victims

-The SMB Wake-Up Call: Downtime, Dollars, and Data Loss

-Many Global Execs Identify Cyber Risk as Top Concern, Beazley

-Cyber Security is a Boardroom Imperative: New Data Reveals Urgency for Proactive Defence

-Rethinking Cyber Risk as Traditional Models Fall Short

Black Arrow Cyber Threat Intelligence Briefing 27 June 2025:

-Nearly Half of Companies Opt to Pay the Ransom, Sophos Report Finds

-New Hires More Likely to Fall for Phishing and Social Engineering Attacks

-BT Warns UK SMEs Are Primary Targets for Hackers as Only Three in Five Have Had Cyber Security Training

-More than Half of Cyber Security Professionals Told to Conceal Breaches, Survey Claims

-Half of Security Pros Want GenAI Deployment Pause

-Cyber Attacks on Insurers Put CFOs on High Alert

-Scattered Spider Behind Cyber Attacks on M&S and Co-op, Causing Up to £440M in Damages, Widening Attacks to Insurance, Aviation and Transportation Sectors

-Netflix, Apple, BofA Websites Hijacked with Fake Help-Desk Numbers

-Police Alerts About New SMS “Blaster” Scams Used for Smishing

-Report Reveals 5 in 6 Organisations at Risk Due to Immature Supply Chain Security

-Businesses Urged to Strengthen Cyber Defences amid Increase in Iran-Adjacent Attacks

-National Security Strategy 2025: Security for the British People in a Dangerous World

-How Geopolitical Tensions Are Shaping Cyber Warfare

Black Arrow Cyber Threat Intelligence Briefing 20 June 2025:

-Survey Reveals 98% of CISOs Anticipate Increased Cyber Attacks Within Three Years

-Over Two Thirds of MSPs Hit by Multiple Breaches in Past Year, Survey Reveals

-IT Helpdesk Scams are Ramping Up – Here’s What Leaders Can Do

-Phishing 3.0: Agentic AI Ushers in New Generation of Unprecedented Risk

-Why CISOs Must Align Business Objectives and Cyber Security

-Scattered Spider has Moved from Retail to Financial Services, Insurance Now Targeted

-Ransomware Thrives in Shook-Up Criminal Underworld

-Russian Gang’s Cyber Attack on UK Blood Services ‘Harmed 170 Patients’

-Experts Warn Clicking "Unsubscribe" Could Actually be a Security Risk, Here's Why

-Security Is Only as Strong as the Weakest Third-Party Link

-Employees Are Using AI Where They Know They Shouldn’t

-Threat of Cyber Attacks from Iran Concern Security Experts

Black Arrow Cyber Threat Intelligence Briefing 13 June 2025:

-Scattered Spider Uses Tech Vendor Impersonation and Phishing Kits to Target Helpdesks

-An Emerging Phishing Technique Exploits Trust in Browser-based Messages

-Cyber Attacks on Smartphones Hit New High – Here’s How to Stay Safe

-Distributed Denial of Service Attacks on Financial Sector Surge in Scale and Sophistication

-Cyber Resilience Begins Before the Crisis

-How Did Britain’s Food Supplies Become So Vulnerable?

-Europol Says Criminal Demand for Data is “Skyrocketing”

-AI Is a Data-Breach Time Bomb, Reveals New Report

-What Is Penetration Testing? Types, Processes, Tools, and Why It’s All Worth It

-Internet Infamy Drives the Com’s Crime Sprees

-China-Linked Threat Actor Targeted +70 Orgs Worldwide, SentinelOne Warns

-Here’s Why Ignoring Politics Is No Longer an Option for Cyber Defence

-UK to Join Up with Allies for Stronger Response to Putin’s ‘Grey Zone’ Warfare

Black Arrow Cyber Advisory 11 June 2025 – Security Updates from Microsoft, Adobe, Ivanti, Salesforce, SAP, and Google

Black Arrow Cyber Threat Intelligence Briefing 06 June 2025:

-Half of Firms Suffer Two Supply Chain Incidents in Past Year

-Vendor Email Compromise (VEC) Attacks Outpace Business Email Compromise (BEC) in EMEA

-UK SMBs Are Ramping Up Cyber Security Spending

-CISO Roles Expand Beyond Cyber Security as Organisations Embrace Strategic Security Leadership

-CISO 3.0: Leading AI Governance and Security in the Boardroom

-Play Ransomware Breached 900 Victims, Including Critical Orgs

-Cyber Claims Report Shows Ransomware Claims Frequency Remains Steady

-Role of Threat Intelligence in Proactive Defence Strategies

-Beware GenAI Use is Outpacing Security Controls

-Why Teenage Hackers Pose More Danger Than Ever

-‘Nation States don’t do hacking for fun’ UK NCSC Urges Businesses to Follow Geopolitics as Defensive Strategy

-Damascened Peacock: Russian Hackers Targeted UK Ministry of Defence

Black Arrow Cyber Threat Intelligence Briefing 30 May 2025:

-New Spear-Phishing Attack Targeting Financial Executives by Deploying Malware

-The Hidden Cyber Risks in Your Executive Team’s Digital Footprint

-Mandatory Ransomware Payment Disclosure Begins in Australia

-Cyber is Now the Top Reputational Risk for Global Firms for 2024/25 per WTW

-Cyber Security Teams Generate Average of $36M in Business Growth

-M&S Boss: I Went into Shock over Cyber Attack

-Cyber Criminals Exploit AI Hype to Spread Ransomware, Malware

-AI Is Perfecting Scam Emails, Making Phishing Hard to Catch

-4.5% of Breaches Now Extend to Fourth Parties

-Any Teenager Can Be a Cyber Attacker Now, Parents Warned

-New Russian State Hacking Group Hits Europe and North America

-DragonForce Engages in "Turf War" for Ransomware Dominance

Black Arrow Cyber Threat Intelligence Briefing 25 May 2025:

-M&S IT Contractor ‘Investigating Whether It Was Gateway for Cyber Attack’; M&S Chief Executive Faces £1.1M Pay Hit

-Ransomware Attack on Food Distributor Spells More Pain for UK Supermarkets

-Businesses Ignore Advice on Preventing Cyber Attacks, Says GCHQ

-Executive Complacency Is the Most Dangerous Cyber Threat Today, Warns Insurance VP

-Cyber Security Now HSBC’s Largest Operational Cost

-Best Practices for Board-Level Cyber Security Oversight

-The Importance of Culture in an Effective Cyber Security Programme

-You Do a Fire Drill, so Do a Cyber Attack Drill

-Many Rush into GenAI Deployments, Frequently Without a Security Net

-SMBs Remain Easy Pickings for Cyber Criminals – Here’s Why

-Your Information Was Probably Stolen Again: Researcher Discovers 184 Million Stolen Logins

-Lumma Infostealer Infected About 10 Million Systems Before Global Disruption

-Russia-Linked APT28 Targets Western Logistics Entities and Technology Firms

Black Arrow Cyber Threat Intelligence Briefing 16 May 2025:

-Thousands of UK Companies 'Could Have M&S-Style Hackers Waiting in Their Systems'

-North Korean IT Workers Are Being Exposed on a Massive Scale, Potentially Thousands of Businesses Infiltrated

-‘They Yanked Their Own Plug’: How Co-op Averted an Even Worse Cyber Attack

-UK Government Publishes New Software and Cyber Security Codes of Practice

-Ransomware and the Board’s Role: What You Need to Know

-73% of CISOs Admit Security Incidents Due to Unknown or Unmanaged Assets

-AI Is Making Phishing Emails Far More Convincing with Fewer Typos and Better Formatting: Here’s How to Stay Safe

-Ransomware Enters ‘Post-Trust Ecosystem’

-Sim-Swap Fraud Rises by 1,000%: Why You Should Use App-Based, not SMS-Based, Two-Factor Authentication

-Cyber Threats Outpace Global Readiness

-CISOs Must Speak Business to Earn Executive Trust

-Downing St Updating Secret Contingencies for Russia Cyber Attack, Report Claims

Black Arrow Cyber Advisory 15 May 2025 – Microsoft, Adobe, Ivanti, Fortinet, ASUS, Apple, Broadcom, Juniper and Zoom Security Updates

Black Arrow Cyber Threat Intelligence Briefing 09 May 2025:

-Email-Based Attacks Top Cyber Insurance Claims

-Hackers Pose as Staff in UK Retail Cyber Strikes

-High Profile UK Cyber Attacks Underscore the Case for Resilience over Reactivity

-Cyber Attacks Are Costing UK Firms Billions Every Year: Ransom Payments, Staff Overtime, and Lost Business Are Crippling Victims

-Don’t Plug Phones into Chinese Electric Cars, Defence Firms Warn

-94% of Leaked Passwords Are Not Unique

-Personal Data of Top Executives Easily Found Online

-The SMB Cyber Security Gap: High Awareness, Low Readiness

-How Cyber Criminals Exploit Psychological Triggers in Social Engineering Attacks

-Darcula Phishing as a Service Operation Snares 800,000+ Victims

-Cyber Criminals Hold Britain’s Boardrooms to Ransom

-UK at Risk of Russian Cyber and Physical Attacks as Ukraine Seeks Peace Deal

Black Arrow Cyber Threat Intelligence Briefing 02 May 2025:

-M&S ‘Had No Plan’ for Cyber Attacks, with Staff Sleeping in the Office Amid ‘Paranoia’ and ‘Chaos’

-More than 60% of Organisations Are Insufficiently Prepared to Address Urgent Geopolitical, Cyber Security, and Regulatory Risks

-Fake Payments, Receipts and Invoices on the Rise

-Account Takeovers: A Growing Threat to Your Business and Customers

-North Korean Operatives Have Infiltrated Hundreds of Fortune 500 Companies

-Phone Theft Is Turning into a Serious Cyber Security Risk

-Why Cyber Resilience Must be Part of Every Organisation’s DNA

-Compliance Management In 2025: Ensuring Your Security Strategy Meets Regulatory Demands

-Ransomware Attacks are Getting Smarter, Harder to Stop

-People Know Password Reuse Is Risky but Keep Doing It Anyway

-A Cyber Security Paradox: Even Resilient Organisations Are Blind to AI Threats

-Securing the Invisible: Supply Chain Security Trends

-Don’t Overlook the BISO Role When it Comes to Growth and Continuity

Black Arrow Cyber Threat Intelligence Briefing 25 April 2025:

-Cyber Security Is Now Critical for Business Growth, CEOs Say

-Cyber Threats Now a Daily Reality for One in Three Businesses

-66% of CISOs Are Worried Cyber Security Threats Surpass Their Defences

-M&S: Shares at FTSE 100 Retailer Fall as Cyber Attack Hits Customers

-Verizon DBIR: Small Businesses Bearing the Brunt of Ransomware Attacks

-Cyber Attacks Surged in 2025, with Third Party Attacks Seeing a Huge Rise

-Nation-State Threats Put SMBs in Their Sights

-Global Firms Succumb to Ransomware: 86% Pay Up Despite Having Advanced Backup Tools

-Dutch Intelligence Report: Russia’s Sabotage in Europe Borders on State Terrorism

-Cyber Crime Syndicates Expand Beyond Southeast Asia, UN Warns of Global Threat

-159 Vulnerabilities Exploited in Q1 2025 — 28% Within 24 Hours of Disclosure

Black Arrow Cyber Threat Intelligence Briefing 18 April 2025:

-Fraud in Your Inbox: Email Is Still the Weakest Link

-Firm Fined After Stolen Client Details Leaked onto Dark Web

-Financial Fraud, with a Third-Party Twist, Dominates Cyber Claims

-Cyber Risks in M&A: When Companies Merge, So Do Their Cyber Threats

-CISOs Turn to Cyber Risk Quantification to Bridge the Gap Between Security and Business

-UK Financial Services Under Pressure from Cyber Security Challenges and Mounting Regulatory Requirements

-Organisations Can’t Afford to Be Non-Compliant

-C-Suite Divides on Cyber Security Threats Pose Organisational Risks, Study Finds

-Cyber Security Threats and Geopolitical Risks Top Business Travel Concerns

-Rising Cyber Threats Fuel 12.2% Growth in Global Cyber Security Spending

-Understanding Credential Stuffing: A Growing Cyber Security Threat

-30% of Charities Experienced Cyber Security Breaches or Attacks Last Year

-The UK’s Phone Theft Crisis Is a Wake-Up Call for Digital Security

Black Arrow Cyber Threat Intelligence Briefing 11 April 2025:

-Why Organisations Are Doubling Down on Cyber Crisis Simulations

-UK SMEs Losing Over £3bn a Year to Cyber Incidents

-Over 40% of UK Businesses Faced Cyber Security Breaches in 2024

-Boards Urged to Follow New Cyber Code of Practice

-Two-Thirds of Financial Services Firms Hit by Cyber Breach in Past Year

-AI Is Now Better Than Humans at Phishing

-Europol Warns: AI Is Turbocharging Organised Crime

-Is HR Running Your Employee Security Training? Here’s Why That’s Not Always the Best Idea

-Precision-Validated Phishing Elevates Credential Theft Risks

-Why Remote Work Is a Security Minefield (and What You Can Do About It)

-Why Cyber Security Should Be a Top Priority in Fintech

-Half of Firms Stall Digital Projects as Cyber Warfare Risk Surges

Black Arrow Cyber Advisory 09 April 2025 – Key Security Updates from Microsoft, Fortinet, Adobe, Ivanti, and Google Chrome

Black Arrow Cyber Threat Intelligence Briefing 04 April 2025:

-Why Global Tensions Are a Cyber Security Problem for Every Business

-When Disaster Strikes, Proper Preparation Prevents Poor Performance

-GenAI Turning Employees into Unintentional Insider Threats

-Cyber Scams Cost Businesses $1.7 Million Per Year, Claims Report

-The Human Side of Insider Threats: People, Pressure, and Payback

-North Korean IT Worker Army Expands Operations in Europe

-The UK’s Cyber Security and Resilience Bill Will Boost Standards and Increase Costs

-Why Multi-Factor Authentication Is Still Absolutely Essential in 2025

-Bridging the Gap Between the CISO and the Board of Directors

-Enterprises Beef Up Cyber Security Plans to Mitigate AI Risks

-Prioritising an Enterprise-wide Cyber Culture in 2025

-Surge of Swatting Attacks Targets Corporate Executives and Board Members

Black Arrow Cyber Threat Intelligence Briefing 28 March 2025:

-Third-Party Security Issues Could Be the Biggest Threat Facing Your Business

-New Morphing Meerkat Phishing Kit Mimics 114 Brands

-NCA Warns of Sadistic Online “Com” Networks

-Threat Actors Abuse Trust in Cloud Collaboration Platforms

-Report Reveals How Breaches Are Fuelling Hyper-Personalised Email Attacks

-No MFA? Expect Hefty Fines, UK’s ICO Warns

-Mobsters Now Overlap with Cyber Crime Gangs and Use AI for Evil, Europol Warns

-Ransomware Attacks Surge Despite Payments Being Down

-High-Severity Cloud Security Alerts Tripled in 2024

-If You Think You’re Immune to Phishing Attempts, You’re Wrong!

-UK Expanding Cyber Capabilities Amid US Pause