May 2025 Legal Threat Intelligence Briefing

May 2025 Legal Sector Threat Analysis Throughout May 2025, legal practices worldwide continued to experience significant cyber threats, with ransomware attacks showing particular tenacity. Recent monitoring of publicly disclosed breaches on ransomware.live between 1 May 2025 and 31 May 2025 has revealed at least three confirmed incidents specifically targeting law firms. These findings have been […]

May 2025 Consulting Threat Intelligence Briefing

Throughout the period from 1 May 2025 to 31 May 2025, the consulting industry faced a significant level of ransomware activity, with two high-profile breaches reported on ransomware.live. These incidents, corroborated by analyses published by Mandiant on 8 May 2025 and further supported by threat data from IBM X-Force Exchange on 12 May 2025, demonstrate […]

May 2025 Real Estate Threat Intelligence Briefing

Threat Analysis of the Real Estate Industry Sector – May 2025 Throughout May 2025 (1 May 2025 to 31 May 2025), our assessment of publicly available data on ransomware.live, cross-referenced with intelligence updates from Mandiant (6 May 2025), IBM X-Force Exchange (9 May 2025) and CrowdStrike Falcon OverWatch (15 May 2025), reveals three significant ransomware […]

May 2025 Research Threat Intelligence Briefing

Threat Analysis of the Research Industry Sector – May 2025 The Research industry has long been a key target for ransomware operators due to its valuable intellectual property and often decentralised networks. This report assesses the latest threats facing the Research sector between 1 May 2025 and 31 May 2025, referencing observed activity on ransomware.live […]

May 2025 Defence Threat Intelligence Briefing

Threat Analysis of the Defence Industry Sector – May 2025 Between 1 May 2025 and 31 May 2025, our monitoring of ransomware.live revealed a series of notable breaches targeting organisations operating within the Defence industry. According to a snapshot taken on 2 June 2025, two confirmed ransomware incidents emerged during this four-week period, marking a […]

May 2025 Logistics Threat Intelligence Briefing

Threat Analysis of the Logistics Sector (01/05/2025 – 31/05/2025) Throughout May 2025, the logistics industry has experienced a notable escalation in ransomware activity, as evidenced by recent disclosures on ransomware.live and corroborated by supporting investigations from a variety of reputable sources, including Mandiant (5 May 2025) and IBM X-Force Exchange (17 May 2025). This report […]

May 2025 Maritime Threat Intelligence Briefing

Maritime Industry Threat Analysis: May 2025 Throughout May 2025, the Maritime sector has experienced renewed ransomware-driven targeting, with critical implications for both shipping operations and associated logistics chains. This report provides a comprehensive analysis of recent breaches within the Maritime industry between 1 May 2025 and 31 May 2025 based on publicly available data from […]

May 2025 Finance Threat Intelligence Briefing

Threat Analysis of Finance Sector Breaches for May 2025 During the period from 1 May 2025 to 31 May 2025, intelligence collated from ransomware.live, in conjunction with data verified by Mandiant (Google Cloud) on 12 May 2025 and further cross-referenced with insights from IBM X-Force Exchange and OTX, revealed a significant spike in ransomware activity […]

May 2025 Insurance Threat Intelligence Briefing

Over the course of May 2025, the insurance industry continued to face a considerable number of ransomware threats, underlining the persistent risk posed by well-resourced cybercriminal groups. The latest data drawn from ransomware.live from 1 May 2025 to 31 May 2025 indicates that three distinct incidents affected insurance providers in Europe, compromising sensitive policyholder data […]

May 2025 Transportation Threat Intelligence Briefing

Transportation Industry Threat Analysis for May 2025 Throughout May 2025 (1 May 2025 to 31 May 2025), ransomware attacks against the transportation sector have remained a pressing concern, with newly documented breaches and attempted intrusions emerging across diverse geographies. Our investigation draws upon insights from ransomware.live, corroborated by authoritative sources such as Mandiant (cross-referenced on […]