Ransomware’s Evolving Playbook
Ransomware attacks became more targeted, with groups going after backups, threatening data leaks, and using AI to craft convincing phishing emails.
As 2025 comes to a close, we’re looking back at some of the most impactful cyber threats of the year and more importantly, what they reveal about the challenges ahead. From ransomware tactics to AI-driven phishing and risky app integrations, this round-up highlights where businesses have been most vulnerable and how you can strengthen your defences in 2026.
Ransomware attacks became more targeted, with groups going after backups, threatening data leaks, and using AI to craft convincing phishing emails.
Store backups off-network, use phishing-resistant MFA, and revisit your incident response plan.
Multi-Factor Authentication (MFA) remained a must—but poor setups and “MFA fatigue” left many organisations vulnerable.
Switch to number-matching or hardware-based MFA, and monitor authentication logs for suspicious behaviour.
SaaS tools, browser extensions, and file-sharing platforms were quietly adopted by users, expanding the attack surface without IT knowing.
Audit third-party app permissions and apply conditional access to restrict unsanctioned tools.
Vendors lacking basic security protocols or Cyber Essentials certification introduced risk into core systems.
Require suppliers to meet baseline standards and build supply chain security into your strategy.
Old admin accounts and forgotten guest logins opened doors for attackers in multiple breaches this year.
Run regular access reviews and automate account deactivation for leavers and expired roles.
Use the final weeks of 2025 to get a head start:
If you're new to Bluebeam Max or simply want to learn more about what it can do, we've gathered answers to the questions we're asked most often.
Learn how PLM ERP integration creates a digital thread, unifying engineering and manufacturing. Explore PLM vs ERP and how connected systems improve collaboration.
Learn how to protect your organisation from QR code phishing, adopt passkeys securely, and manage AI note-takers with the latest IT security advice from Symetri.