May 2025 was a busy month in the world of cybersecurity news, and not in a good way! The massive Marks and Spencer cyber attack continued to make headlines almost every other day. Read all about the new twists and turns in the M&S cybersecurity saga in our Updated Marks and Spencer Cyber Attack Timeline.
The UK’s Legal Aid Agency (LAA), overseen by the Ministry of Justice, has fallen victim to a major cyber attack. Many are estimating that this is one of the most significant breaches of sensitive data in the UK’s legal sector to date.
The attack, which came to light in April 2025, has exposed deeply confidential information. It has also disrupted critical services, triggering national concern and prompting urgent investigations.
One of the most influential Cryptocurrency platforms in the world, Coinbase, is the latest victim of a headline-making cyber attack. While there have been other crypto-related hacks in the past, arguably with larger repercussions than those we have seen with Coinbase so far, there’s a lot more at stake here.
UK Retailers are experiencing the full wrath of cyber crime to the greatest degree. It started with Marks and Spencer on the Easter Weekend. Customers were left high and dry without being able to access their “Click and Collect” orders. Online payments became inaccessible and store shelves were fast clearing up.
Easter weekend didn’t go as planned for Marks & Spencer - one of the UK's favourite retailers for clothes, food and more. The industry giant fell victim to a cyber attack that deeply disrupted its operations. Customers were unable to access the Click and Collect service and even contactless payments were inaccessible.
Cyber incident response training is an important investment for today's business leaders. It's crucial that executive and management professionals throughout the organisation understand the scope of cyber threats and possess the necessary knowledge to respond quickly and effectively.
Cyber Incident Response is the structured approach businesses use to detect, respond to, and recover from these cyber threats. It helps organisations contain damage and resume normal operations with minimal disruption.
The finance sector is quite susceptible to cyber attacks since the security of digital financial assets makes it so. Cybercriminals with continually changing attack techniques find banks, investment companies, and insurance firms appealing. The necessity for companies to apply strict cybersecurity policies is rising daily, given these mounting hazards.
The surge in remote work didn't just rewrite the rules of collaboration; it unlocked doors that many organisations didn’t even know existed. Conversations that once occurred face-to-face now bounce through cloud platforms, scattered across Slack threads, Zoom calls, and internal wikis.
Workflows became more flexible, but the trust infrastructure behind them didn’t keep up. The illusion of a closed, protected system vanished, and in its place came a vast, decentralized sprawl—one where the lines between internal and external communication blur every day. The increased likelihood of data breaches associated with remote working adds further urgency to address these vulnerabilities
Cyber Incident Response Planning is critical for businesses concerned about cybersecurity. There is no prevention of cyber crime anymore. The only protection is preparation. But what are the key 7 phases of cyber incident response? And how do you ensure that your cyber incident response plan covers all these phases effectively? That's what we are about to explore in this blog.
A massive cyber-attack on retail giant Marks and Spencer leads to postponed deliveries, halted online transactions, and frozen gift card processing. A large-scale phishing campaign compromises corporate email marketing accounts at Mailchimp, SendGrid, HubSpot, Mailgun, and Zoho. Car Rental Giant Hertz begins notifying customers of a massive breach of data.
And all of this is just the tip of the iceberg when it comes to the major cyber attacks, ransomware attacks and data breaches of April 2025.
Cyber Management Alliance is a global frontrunner in planning, producing and conducting Cyber Tabletop Exercises. To deepen our understanding of our clients' expectations and requirements, we regularly undertake research initiatives. In one such recent exercise, we surveyed some of our clients to understand what makes them outsource their cyber drills to external experts such as CM-Alliance.
The results showed a general consistency in the challenges businesses face when trying to run their own cyber security tabletop exercises.
In this blog, we explore the results of the survey - the top 10 pain points of clients when it comes to cyber drills. We also offer you insights on how we address those challenges to deliver a cyber tabletop exercise that is genuinely effective and impactful for your business.
What could an open-source toolkit, a cannabis product supplier, an AI startup from China and a UK telecom giant have in common? Not much except they have been all been on the hitlist of cyber criminals. Information of millions of customers has been compromised, operations have been disrupted, and worst of all - healthcare service delivery was yet again impacted at the start of the year.
Get the lowdown on the biggest cyber attacks, data breaches and ransomware attacks that made headlines in January 2025.
Cyber attack drills have become an essential component of any robust incident response strategy. These cyber attack simulation exercises recreate real-world attack scenarios to test and improve the readiness of an organisation’s cybersecurity team.
However, one of the most debated aspects of tabletop exercises is whether they should be announced in advance or conducted as a surprise.
Each approach has its pros and cons, and the decision largely depends on an organisation’s goals and maturity level.
Almost every month in 2024 came with its own shattering cybersecurity headline. We round up 10 of the biggest cyber attacks, data breaches and ransomware attacks from the year gone by. You'll also find at the end of this blog a table of 25 other noteworthy attacks that you should know about.
Have you taken a look at our monthly compilations of cyber attacks, data breaches and ransomware attacks from 2024? If you so much as glance through them, you’ll know exactly how daunting the evolution of the cyber threat landscape has been in the past year. Cyber security should be a top priority for businesses of all sizes in 2025. And Cyber Drills are a critical tool in building robust cyber defences.
E-commerce has become the main way for many companies to sell goods and services. For many customers it has become the way to make the vast majority of purchases. The success of your online store depends on various factors. These include a good branding and maximum website usability.
As well as the quality of the goods or services you offer. However, another factor is no less important. Namely, how the payment process you offer for your customers. Is it safe enough and convenient? That is why choosing the most secure payment gateway for your e-commerce platform is of utmost importance. We will help you understand how to choose the right payment gateway. We’ll also look at what types of payment gateways exist, and how to integrate online payments on your website.
In December 2024, a series of high-profile cyber attacks, data breaches, and ransomware incidents underscored the unrelenting threat landscape confronting businesses today. From telecommunications giant BT and healthcare platform ConnectOnCall to educational institutions such as Texas Tech University, the month witnessed a disturbing uptick in both frequency and severity of malicious activities.
Major engineering and technological services firms, including ENGlobal and Blue Yonder, were not spared, nor were critical infrastructure providers like Telecom Namibia. Healthcare also took a hit, with Anna Jaques Hospital suffering significant disruptions. Kadokawa, the renowned Japanese game maker, experienced breaches that rattled the gaming community.
Even global energy players like Electrica Group were caught in the crosshairs, alongside medical device company Artivion, proving that no sector is immune to cyber threats. Our monthly compilation delves into the biggest cyber attacks and breaches in December 2024. It also explores how these organisations navigated the aftermath of December’s most significant cyber incidents.
In today's digital landscape, monitoring the dark web has become increasingly important for cybersecurity professionals, researchers, and organisations looking to protect their digital assets.
LMS is the foundation of today’s learning and organisational training. Such systems facilitate the organisation of courses and course progress and also offer learning solutions. But here’s the catch: Such systems process a large volume of personal information, identity, academic achievements, and even payment information.
If not well protected, this data can be accessed by the wrong people and cause financial and or reputational loss. LMS solutions from syndicode.com emphasise the importance of incorporating foundational security measures from the ground up, ensuring a safe environment for all users.
Login