BotNet News

Cyberthreat News is the weekly security roundup that provides an overview of key threats and defensive strategies. The roundup was launched in 2022 and is published every Wednesday.

Banking:

In one of the largest financial sector compromises of 2025, hackers breached Bank Sepah in April to steal a million customers’ data. This attack highlighted the impact of hacking on consumer confidence in regulated financial institutions.

Retail:

Marks & Spencer’s Easter weekend breach demonstrates how simple social engineering can disrupt online sales. The attack highlighted the importance of multi-factor authentication and identity monitoring to defend against social engineering attacks.

Government:

UK Ministry of Defence’s breach impacted the financial information of 270,000 current and former military personnel. The breach demonstrated the risks of third-party vulnerabilities and reaffirmed the need for robust supply-chain security.

China-linked exploitation: In July, attackers exploited critical vulnerabilities in Microsoft SharePoint to gain access to U.S. government agencies and international companies. This threat exemplified the growing sophistication of Chinese cybercriminals.

Other:

Anthropic is expanding a program that allows vetted cybersecurity professionals to test its advanced AI models with reduced safeguards and blocking classifiers. The company’s Project Glasswing initiative uncovered at least 129,000 verified software vulnerabilities during the first half of 2026.