"The first half of 2025 has undeniably showcased the devastating power of data breaches and ransomware attacks. High-profile brands such as Marks & Spencer, Harrods, and Qantas Airlines have all been through cyber shockwaves, with countless amounts of employee and customer information lost to hackers. This has not only eroded brand trust but also raised serious questions about the solidity of overall business security infrastructure."
"The breaches were primarily caused by social engineering attacks targeting IT help desks, which allowed attackers to gain access to systems and deploy ransomware. According to the latest insights, hackers impersonated employees to trick IT staff into granting access by requesting to reset passwords, ultimately leading to the compromise of sensitive data. All evidence shows hackers' deep understanding of human psychology, enabling them to exploit social norms and complacency to bypass some of the most robust data security systems."
"Affected businesses have responded swiftly to attacks and offered timely support to those impacted; however, it's clear all businesses need to improve their cybersecurity if they are to stay safe in this ever-evolving world of cyber threats. While some businesses may think that investing in advanced technology will be enough to address this, it will be useless if they don't equally invest in human elements to strengthen cyber resilience and ensure long-term data security."
The first half of 2025 saw major data breaches and ransomware attacks that exposed large volumes of employee and customer information from well-known brands. Social engineering targeting IT help desks enabled attackers to impersonate employees, request password resets, and gain access to systems to deploy ransomware. Hackers exploited human psychology, social norms, and complacency to bypass strong technical controls. Affected businesses provided support to impacted individuals but must improve overall cybersecurity. Investing solely in advanced technology is insufficient; equal investment in human-focused measures and revised password management practices is required to strengthen cyber resilience.
Read at TechRadar
Unable to calculate read time
Collection
[
|
...
]