Black Arrow Cyber Threat Intelligence Briefing 31 October 2025:

-Ransomware Recovery Perils: 40% of Paying Victims Still Lose Their Data

-Reacting Slowly to a Security Breach Opens up Your Business to More Threats, Report Warns

-SMEs Unprepared to Defend Against Advanced Cyber Threats

-UK Financial Regulator to Focus on Cyber Defence

-The 10 Biggest Issues CISOs and Cyber Teams Face Today

-The Cyber Security Perception Gap: Why Executives and Practitioners See Security Differently

-Shadow AI: One In Four Employees Use Unapproved AI Tools, Research Finds

-LinkedIn Phishing Targets Finance Execs With Fake Board Invites

-Social Engineering: Why the ClickFix Malware Attack Just Won’t Go Away

-New Phishing Attack Using Invisible Characters Hidden in Subject Line

-BT Warns of Soaring Cyber Threats Targeting UK Firms

Black Arrow Cyber Threat Intelligence Briefing 24 October 2025:

-GCHQ Says Boards Must Understand Cyber Risks and Prepare for Attacks That Get Through

-Study Reveals Cyber Confidence Often Misaligned with Reality

-Threat Actors Exploiting Faster Than Businesses Can Respond

-Millions Still Use One Password Across Multiple Accounts

-Microsoft Warns of Sharp Rise in Identity Attacks Driven by Password Theft

-Insider Risks Cause Data Loss in 77% of Organisations

-AI-Driven Threats Are Top Concern for Cyber Professionals in 2026

-Infostealers Are Reshaping the Cyber Security Landscape

-How ClickFix Attackers Trick You to Attack Yourself and Bypass Your Security

-Business Confidence in Ransomware Defence Is High, But Readiness Is Low

-Ransomware Payouts Surge to $36M in Recent Cases

-Third-Party Breaches Escalate as Confidence Gap Widens Among Cyber Leaders

Black Arrow Cyber Threat Intelligence Briefing 17 October 2025:

-CISOs Urged to Rethink Tabletop Exercises as Most Incidents Are Unrehearsed

-Co-op CEO: Cyber Responsibility Lies with Senior Leaders

-UK Government: Businesses Must Prepare for Total IT Failure

-UK Security Agency Reports Sharp Rise in Cyber Attacks

-Attackers Use Valid Credentials to Breach SonicWall VPNs

-F5 Networks Confirms Long-Term Breach by Government Hackers

-Extortion Group Publishes Data from Salesforce Customer Breaches

-Microsoft: Over Half of Cyber Attacks Driven by Extortion or Ransomware

-Ransomware Attacks Surge 36% in Q3

-North Korean Attackers Use Blockchain to Evade Detection

-Russian Cyber Attacks Against NATO States Rise by 25%

-US Authorities Seize $15 Billion in Bitcoin from Crypto Scam Network

Black Arrow Cyber Advisory 16 October 2025 - Security Updates from Microsoft, SAP, Fortinet, Ivanti and Oracle (E-Business Suite)

Black Arrow Cyber Threat Intelligence Briefing 10 October 2025:

-CFOs Put Cyber at the Top of the Risk Agenda

-SonicWall Cloud Backup Breach Exposes Firewall Configurations

-Budgets and Skills Lag Behind Rising Attacks

-SMBs Remain Exposed to AI‑Driven Threats and Ransomware Complacency

-Digital Fraud Now Costs Firms an Average 7.7% of Revenue

-Survey Finds Attacks Hit 91% of UK Universities and 43% of Businesses

-Insurer Forecasts 40% Rise in Named Ransomware Victims by 2026

-Paying Ransoms Increasingly Fails to Restore Data

-SaaS Incidents Surge Despite High Confidence

-AI Supercharges Phishing and Stretches Defences

-Deepfake Voice Risks Highlight Identity Verification Gaps

-Insurers and Asset Managers Expand Cybersecurity Oversight

Black Arrow Cyber Threat Intelligence Briefing 03 October 2025:

-IT Provider Probed as Possible Entry Point in JLR and M&S Breaches

-Security Leaders See Attacks Growing in Frequency and Impact

-Expert Says Basic Security Lapses Still Drive High Profile Breaches

-Russian Vessel Suspected of Mapping Europe’s Undersea Cables

-Hiscox: 80% Of Victims Paid Ransoms and Many Faced Extra Demands

-Allianz: Ransomware Still Drives Large Claims as Criminals Focus on Data Theft

-How Criminals Use AI To Supercharge Phishing and Scams

-Proofpoint: Phishing Remains the Leading Breach Path as AI Raises the Stakes

-ENISA: Phishing Dominated EU Intrusions Over the Past Year

-Phishing Is Shifting to Mobile Channels and Security Must Follow

-Survey Finds Most Workers Cannot Spot AI-Written Phishing Emails

-Researchers Demonstrate Real-Time Voice Cloning for Vishing Attacks

-Okta Warns of North Korean Fake IT Workers Targeting More Sectors

Black Arrow Cyber Threat Intelligence Briefing 26 September 2025:

-Finance Professionals Rank Cyber as The Top Risk for 2026

-UK Co-operative Group Counts a £200m Sales Hit from Its April Cyber Incident

-Tata Motors Shares Drop 5% after JLR Cyber Attack

-Airport Outages Expose Fragile Links in Aviation Supply Chains

-Attackers Focus on MFA Bypass and Supply Chain Routes

-Insurer Reclaiming Costs from Technology Providers

-Ransomware Crews Multiply and Focus on Data Theft

-Phishing Surges as The Top Doorway for Ransomware In 2025

-Phishing Campaigns Spread Beyond Email as Criminals Exploit New Channels

-Generative AI Attacks Accelerate with Deepfakes and Malicious Prompts

-Stolen Credentials Fuel a Thriving Cybercrime Marketplace

-China Linked Attackers Embedded in Many Enterprises

-Law Firms Face Mounting Raids on Sensitive Client Files

Black Arrow Cyber Threat Intelligence Briefing 19 September 2025:

-Jaguar Land Rover Extends Shutdown After Cyber Attack by Another Week

-Two Scattered Spider Teens Charged over Attack on London’s Transport Network

-Scattered Spider Resurfaces with Financial Sector Attacks Despite Retirement Claims

-It Doesn’t Take a Genius to Be a Cybercriminal, and Open Source Ransomware Is Making It Easier than Ever

-New Android Malware Steals Your Money Then Installs Ransomware

-Disrupted Phishing Service Was After Microsoft 365 Credentials

-AI Threats Top Focus at London Financial Services Summit

-Shadow AI Is Breaking Corporate Security from Within

-Global Hiring Risks: Identity Fraud and Screening Trends

-Cyber Skills Shortage Forces 64% of EMEA Organisations into Risky Security Shortcuts

-70% of Security Leaders Say Internal Misalignment Creates More Chaos Than Threat Actors

-The Secret Psychological Cost of Cyber Attacks

-Russia’s Hybrid Tactics Raise Alarm in EU

Black Arrow Cyber Threat Intelligence Briefing 12 September 2025:

-Qantas Penalises Executives for July Cyber Attack

-Three Critical Facts About Cyber Risk Management

-Pressure on CISOs to Stay Silent About Security Incidents Growing

-Why Security Teams Are Turning to the Dark Web to Protect Executives

-You Should Be Aware of These Latest Social Engineering Trends

-Insider Breaches Are a Bigger Security Threat than Ever Before. Here’s How Your Business Can Stay Safe

-Are Cybercriminals Hacking Your Systems or Just Logging in?

-New Automated Extortion Software Is So Devious You Won't Believe It

-Phishing Kit Unveils New Level of Sophistication

-New Malware Campaigns Highlight Rising AI and Phishing Risks

-Ransomware Kits Built with AI Are Behind a 70% Surge in Attacks

-Ransomware Losses Climb as AI Pushes Phishing to New Heights

Black Arrow Cyber Advisory 10 September 2025 - Security Updates from Microsoft, Adobe, Ivanti, SAP, Fortinet & NVIDIA

Black Arrow Cyber Threat Intelligence Briefing 05 September 2025:

-Workers Told to Stay Home as Jaguar Land Rover Grapples with Attack: Manufacturing Shut Down, Sales Halted

-AI-Powered Cyber Crime Raises Worldwide Alarm Bells

-DDoS Attacks Serve as Instruments of Political Influence and Disruption

-Phishing Emails Are Getting Smarter and Using Some New Tricks to Snare Victims

-If You’re Using Microsoft Teams or Zoom, Beware: Hackers Could Be Targeting Your Company

-AI Impersonation Scams Are Sky-Rocketing in 2025 – Here’s How to Stay Safe

-Warning as 60% of Financial Attacks Start with Stolen Credentials

-Security Experts Call for Better ‘Offboarding’ Practices amid Spate of Insider Attacks by Outgoing Staff

-Boards Are Being Told to Rethink Their Role in Cyber Security

-Vibe Coding Creates Great Apps with Lax Security. But There Are Ways Around That.

-State-Sponsored Hackers Behind Majority of Vulnerability Exploits

Black Arrow Cyber Threat Intelligence Briefing 29 August 2025:

-Fake IT Support Attacks Hit Microsoft Teams

-KnowBe4 Report Reveals Global Financial Sector Faces Unprecedented Cyber Threat Surge

-Cyber Moves from Back Office to Boardroom, and Investors Are Paying Attention

-CISOs Evolve from Guardians to Strategic Business Architects

-Incident Response Planning Emerges as a Key Cyber Security Control in Reducing Risk: Marsh McLennan

-Insurers May Limit Payments in Cases of Unpatched Vulnerabilities

-Anatsa Android Banking Trojan Now Targeting 830 Financial Apps with 19m Downloads

-The Hidden Threat in Enterprise Security: Why It’s Time to Rethink PDFs

-Infostealers: The Silent Smash-and-Grab Driving Modern Cyber Crime

-New Cyber Threats Emerge as Old Ransomware Groups Collapse

-Ransomware Cyber Attack Virtually Shuts Down Entire US State

-Chinese Threat Actor Salt Typhoon Cyber Spies Breached 80+ Nations, FBI Warns

Black Arrow Cyber Threat Intelligence Briefing 22 August 2025:

-85% of Organisations Approach Cyber Security Reactively

-25% of Security Leaders Replaced After Ransomware Attack

-Iranian Threat Actor Group ‘MuddyWater’ Targeting CFOs Worldwide

-Canadian Financial Regulator Hacked, Exposing Personal Data from Member Organisations

-‘Impersonation as a Service’ the Next Big Thing in Cybercrime

-URL-Based Threats Become a Go-To Tactic for Cybercriminals

-How Evolving Remote Access Trojans (RATs) Are Redefining Enterprise Security Threats

-How GenAI Complacency is Becoming Cyber Security’s Silent Crisis

-Fake Employees Pose Real Security Risks

-AI Gives Ransomware Gangs a Deadly Upgrade

-DORA: Six Months into a Resilience Revolution

-Why Your Security Culture is Critical to Mitigating Cyber Risk

Black Arrow Cyber Alert 18 August 2025 – Microsoft 365 'Direct Send' abuse enabling phishing emails from internal addresses

Black Arrow Cyber Threat Intelligence Briefing 15 August 2025:

-Over 29,000 Exchange Servers Still Unpatched Against High-Severity Flaw

-Nearly Half of Enterprises Tested Had Easily Cracked Passwords

-Leaked Credentials Up 160% - What Attackers Are Doing With Them

-Ransomware Attacks Up by 41% Globally

-Physical Threats to Crypto Owners Hit Record Highs

-The UK Cyber Governance Code of Practice: Beyond Basic Protections to Culture, Leadership and Training

-The Human Firewall: Building a Cyber-Aware Workforce

-Microsoft Warns Organisations Without a Rehearsed Response Plan Are Hit Harder by a Security Incident

-Attack Yourself First: the Logic Behind Offensive Security

-These Two Ransomware Groups Are Ramping Up Attacks and Have Claimed Hundreds of Victims

-Financial Services Could Be Next in Line for ShinyHunters

-Three Notorious Cybercrime Gangs, Scattered Spider, ShinyHunters and Lapsus$, Appear to Be Collaborating

-Nation State Actor Groups are Getting Personal, Going After Executives in Their Personal Lives

Black Arrow Cyber Advisory 13 August 2025 - Security Updates from Microsoft, Adobe, SAP, Fortinet and Ivanti

Black Arrow Cyber Threat Intelligence Briefing 08 August 2025:

-AI Can Plan and Execute Cyber Attacks Without Human Intervention

-Ransomware Gangs Attacking Managed Service Providers with Stolen Login Credentials and Vulnerabilities

-Hackers Uses Social Engineering Attack to Gain Remote Access in 5 Minutes

-Social Engineering Attacks Surged This Past Year

-Ransomware Actors Expand Tactics Beyond Encryption and Exfiltration

-Cyber Criminals Are Getting Personal, and It’s Working

-Ransomware Victims Are Still Paying Up, Some More Than Once

-SMBs Struggle with Alert Overload, Cloud Blind Spots and Insider Threats

-Britons Face Cyber-Attack Surge as UK Becomes Most Targeted Country in Europe

-Exposed Without a Breach - The Cost of Data Blindness

-Cyber Insurance Premiums Are Soaring — And So Are Your Risks

Black Arrow Cyber Threat Intelligence Briefing 01 August 2025:

-HR Documents Appear in 82% of All Data Breaches

-Scattered Spider Ransomware Group Infiltrating Slack and Microsoft Teams to Target Vulnerable Employees

-Gen Z Falls for Scams 2x More Than Older Generations

-Millions Hit in Quishing Attacks as Malicious QR Codes Surge

-Ransomware Attacks Escalate to Physical Threats Against Executives

-Ransomware Up 179%, Credential Theft Up 800%: 2025’s Cyber Threat Landscape Intensifies

-New Chaos Ransomware Emerges, Launches Wave of Attacks

-Seychelles Commercial Bank Reported Cyber Security Incident

-Third of Exploited Vulnerabilities Weaponised Within a Day of Disclosure

-Sam Altman Warns That AI Is About to Cause a Massive "Fraud Crisis" in Which Anyone Can Perfectly Imitate Anyone Else

-Getting a Cyber Security Vibe Check on Vibe Coding

-The Growing Impact of AI and Quantum on Cyber Security

Black Arrow Cyber Threat Intelligence Briefing 25 July 2025:

-158-Year-Old UK Logistics Firm KNP Collapses After Ransomware Attack Exploits Employee’s Weak Password

-Hackers Fooled Cognizant Help Desk, Says Clorox in $380M Cyber Attack Lawsuit

-US Nuclear Weapons Agency ‘Among 400 Organisations Breached by Chinese Hackers’ Exploiting Microsoft SharePoint Vulnerability

-Europe Sees Cyber Attacks Surge Amid Geopolitical Tensions

-68% of Organisations Experienced Data Leakage from Employee AI Usage

-Zimperium Warns of Rising Mobile Cyber Threats Amid Summer Travel Surge

-Cyber Turbulence Ahead as Airlines Strap In for a Security Crisis

-Nearly Half of Managed Service Providers (MSPs) Have Dedicated Kitty for Ransomware Incidents

-UK Confirms Ransomware Payment Ban for Public Sector and CNI

-University Student Who Sold More than a Thousand Phishing Kits to Fraudsters is Jailed

-$15M Reward Offered as American Woman Jailed in North Korea IT Worker Scam

-UK Announces Sanctions Against Russian Cyber Units Over Threats to Europe

Black Arrow Cyber Threat Intelligence Briefing 18 July 2025:

-Most Cyber Security Risk Comes from Just 10% of Employees

-Stop Settling for Check-the-Box Cyber Security Policies

-A New, Silent Social Engineering Attack Is Being Used by Hackers; Your Security Systems Might Not Notice Until It’s Too Late

-Firms Have a Fake North Korean IT Worker Problem – Here’s How to Stop It

-Orgs and Individuals Clinging to Windows 10 Face Heightened Risk, Says NCSC

-Supplier Risk Is Breaking the Size Myth in Cyber

-Most European Financial Firms Still Lagging on DORA Compliance

-AI Cloaking Tools Enable Harder-to-Detect Cyber Attacks

-Ransomware Surges 63% in Q2

-All 6.5m Co-Op Members Had Data Stolen in Recent Cyber Attack, Retailer Admits

-North Korean Hackers Blamed for Record Spike in Crypto Thefts in 2025

-Russia Shifts Cyber War Focus from US to UK Following Trump’s Election

-Europol Disrupts Major Network of Russian-Speaking Cyber Criminals Targeting Ukraine and Its Allies