In 2024, 99% of email threats to corporations were found to be social engineering or phishing attacks, as per Fortra. Most pre-delivery email defenses struggle to block these high-risk threats. About 49% of these attacks targeted Microsoft 365 credentials. Social engineering attacks accounted for 40% of threats, with cybercriminals using phone numbers and QR codes to lure victims. This trend is set to continue with threats becoming more personalized through stolen data. Platforms like DocuSign were heavily exploited, and this exploitation of legitimate services is likely to persist and grow.

The NHS needs to tighten its third-party supplier cybersecurity
The NHS should proactively fortify cybersecurity within its third-party software suppliers following recent damaging ransomware attacks, says Jonathan Lee from Trend Micro. He suggests implementing