This month in safety with Tony Anscombe – Could 2025 version

From a flurry of assaults concentrating on UK retailers to campaigns corralling end-of-life routers into botnets, it is a wrap on one other month full of impactful cybersecurity information

30 Could 2025

It is that point of month once more when ESET Chief Safety Evangelist Tony Anscombe provides his tackle among the most impactful cybersecurity information of the previous 30 or so days. This is a choice of what stood out to him in Could 2025:

a warning from Google that Scattered Spider, the hacking gang that orchestrated current assaults at high-street UK retailers, is now turning their sights to US corporations,
earlier in Could, Marks & Spencer confirmed that some buyer information was stolen within the flurry of assaults on UK retailers, which had brought about M&S to cease taking on-line orders,
cyber-insurance supplier Coalition introduced that enterprise e mail compromise (BEC) assaults and fund switch fraud (FTF) accounted for 60% of the claims final yr whereas ransomware remained “the costliest and disruptive kind of cyberattack”,
the FBI warning about malware that targets end-of-life routers in a bid to corral them right into a botnet,
Coinbase expects the invoice from a current cyberattack to succeed in as much as US$400 million.

Do not forget to take a look at the April 2025 version of Tony’s month-to-month safety information roundup for extra insights.