Cyber Security, Compliance & Business Continuity Update

The FBI Internet Crime Report.identifies significant growth in Business email compromise. These types of fraud accounted for roughly 14.6% of all reported cybercrime losses in 2025. Over 24,000 cases were reported to the FBI with losses totalling over $3 billion. Source FBI Internet Crime Report  (PDF)

Alomst one third third of British manufacturers have been hit by a cyber-attack targetted either directly or as a consequence of an attack on  company in their supply chain. Source: The Guardian

Cyber security company, Barracuda, has provided a proof of concept showing how AI (in this instance, MS CoPilot), can be used to accurately impersonate senior management based on analysing their email writing style. Source: Barracuda

UK manufacturers are increasingly targetted by cyber criminals. 1.84 million ransomware events on British industrial facilities between were recodrd January and May this year according to security services vendor, SonicWall. This represents a 28% increase when compared to the same period in 2025. Source: Security Brief

Cyber crimminal organisations are changing tactics by focussing on exfiltrating sensitive information rather launching cyber attacks. These attacks are facilitated by compromised log-on and identity credentials which are seen to be a more discrete methods of compromise as security systems improve their capability to block malware. Source: Security Brief 

In a recent overhaul of the framework, to maintain certification organisations must now be able demonstrate that controls including (but not limited to) multi-factor authentication (MFA), vulnerability management, access controls and perimeter defences can be shown to be deployed and operating throughout the organisation rather than documented assertions of implementation. Source: Technology Reseller

ENISA (European Network & Information Security Agency) has recently launched a cyber security certification scheme for managed secirty services. This will be of particular relevance to SMB organisations who rely on third party services to maintain their organisations security posure. Source: Industrial Cyber

Major information security frameworks and statndards (NIST, ISO 27001, CMMS, HIPAA & FEDRamp) all now include specific governance arragements for the deployment and use of Artificial Intelligence. Source: Bradley

Cyber "think-tank" the Cyber Security and Business Resilience Centre (CSBR), raises concerns that government deprtment reorganisation could delay progress of the Cyber Security and Resilience Bill through parliament. Source Pinsent Mason

OpenAI, owners of  Chat-GPT released a statement regarding an accidental  Cyber Attack on another organisation. The attack targetted Hugging Face an AI collaboration hub for AI models, datasets, and applications. An AI agent  used it's own AI capability to breach test environment "guard-rails". Hugging Face incurred dented customer confidence and  significant costs for forensic investigation. Source BBC

A report in the Financial Times discusses how supply chain attacks are increasingly used as a mothod of staging multiple downstream attacks. Source: Financial Times 

SMB organisations are caught up in the rivalty Rivalry between 2 major cyber crimminal enterprises. Rivalry between Qilin and The Gentlemen is driving the trend -as attacks on  major corporates are seen as reputation‑boosting in the cybercriminal underground Source: TechRadar

A recent survey & report identifies that hackers are using phishing as their primary method of infiltration and the SME organisations are the the most likely targets. Source: Sophos