Blog #Cybersecurity Trends

In 2025, certain professions face heightened cybersecurity risks due to the nature of their work. IT professionals are exposed through frequent interactions with compromised systems and malware, which attackers exploit to access larger networks.

A significant healthcare data breach occurred when cybersecurity researcher Jeremiah Fowler uncovered an unprotected database belonging to Care1, a Canadian provider of AI-powered software for optometrists.

Cybercriminals are increasingly using advanced HTML techniques to bypass email security filters, heightening the risk of phishing attacks on individuals and organizations.

The Black Basta ransomware group has refined its social engineering tactics, launching a global campaign that combines sophisticated techniques with advanced tools to breach organizations.

Google has released major Chrome updates to address three vulnerabilities, including two high-severity memory safety flaws reported by external researchers.

A recent study by Juniper Threat Labs highlights how attackers use advanced techniques like IP churn and frequent hosting provider changes to maintain their attack infrastructure, emphasizing the importance of proactive defenses.

Deloitte responded to claims by the Brain Cipher ransomware group, which alleged stealing over 1 terabyte of compressed data linked to the company.

Atrium Health has notified the US Department of Health and Human Services (HHS) about a data breach affecting over 585,000 individuals, likely linked to online tracking technologies on its patient portal between 2015 and 2019.

This week’s cybersecurity roundup highlights key developments in the field. Symantec reported that Chinese hackers targeted a major US organization for intelligence gathering, maintaining network access for four months.

DroidBot, a newly discovered Android spyware, is posing significant threats to financial institutions and individuals across Europe. Identified in mid-2024 by Cleafy Labs, DroidBot operates as Malware-as-a-Service (MaaS), enabling cybercriminals to rent its capabilities without technical expertise.

Europol and international law enforcement dismantled the Manson Market cybercrime platform, disrupting phishing networks and seizing stolen data.

Chinese state-sponsored hackers, attributed to groups Daggerfly and Crimson Palace, infiltrated a major U.S. company's network for at least four months in 2024, likely stealing sensitive email data.