Cyber News: Week Ending November 14, 2025

Here is a summary of this week’s top cybersecurity stories relevant to individuals and small businesses, written for all users with simple actionable steps to protect against these threats[1][2][3][4][5].

1. Ransomware Threats Escalate
A faster variant of the Akira ransomware is spreading, targeting businesses and critical organizations. Ransomware locks up essential data until a ransom is paid. For small businesses without backups, this could prove to be detrimental and has forced many victims to close. Individuals are also beginning to be more regularly targeted in these attacks (see notes from last week’s post for more on this).

BET-R Actions: The best defense is to regularly back up important files securely (using an external drive or trusted cloud service) so that paying ransom is unnecessary. Also, keep all software updated to block ransomware from exploiting known weaknesses [1][2].

2. Email Phishing and Social Engineering Surges
Phishing emails, where attackers trick you into clicking malicious links or sharing passwords, are on the rise, with AI making these emails more convincing. Small businesses are hit hard because employees or owners may not, or may be unable to, properly spot these scams.

BET-R Actions: Never click links or open attachments from unknown sources, verify unexpected requests by phone, and use multi-factor authentication (MFA) to add extra login security [2][3].

3. Vendor and Third-Party Risks
Small businesses increasingly rely on third-party services, but hackers often target weaker vendor systems to get to you. This increases the risk of data breaches or operational disruption.

BET-R Actions: Ensure your vendors follow strong security practices, and limit the data you share with them. Regularly review vendor access permissions and monitor for unusual activity [4].

4. The Rise of AI-Powered Attacks
Cyber criminals are deploying AI tools to automate and enhance attacks, making threats more sophisticated. This includes AI-crafted phishing emails and attempts to fool biometric authentication. Recently, Anthropic disclosed that they had thwarted efforts by a nation state actor, presumed to be China, that was nearly completely automated with minimal human interaction.

BET-R Actions: Stay vigilant, update devices regularly, use strong unique passwords saved in a password manager, and consider biometric security like fingerprint or face recognition for your devices when available [1][3][4].

5. Device and Network Vulnerabilities
Warnings were issued about attacks exploiting unpatched network devices like routers and firewalls. These weaknesses give attackers full access and visibility to your home.

BET-R Actions: For households and small businesses, make sure your home or office network hardware firmware is updated frequently. Change default passwords on any new devices and disable unused features to reduce attack routes [5].

Other Recent Trends and Incidents:

• Cybercriminals now use artificial intelligence to create more convincing phishing emails, automate attacks, and evade security tools. Meanwhile, organizations are adopting AI-driven security tools to detect and stop threats faster.
• Early this month, Japanese retailer Askul suffered a massive ransomware breach, exposing user contact details and disrupting key e-commerce operations.
• Ransomware attacks continue to grow and now often include threats to release stolen information (“double extortion”). Even small businesses and retailers, such as the Askul breach in Japan, are being seriously impacted, leading to major financial and data losses.
• Modern phishing schemes use deepfake technology, AI, and stolen business logos to appear highly convincing. Email attacks remain the most common threat, with success rates rising thanks to human error and lack of awareness.
• Hackers increasingly target third-party software vendors and service providers to gain access to many businesses at once. This trend puts both businesses and their customers at risk.
• In 2025, nearly half of small businesses reported being targeted, with incidents happening every 11 seconds. Many companies face revenue losses or closure after a significant security incident.
• Flood-style attacks are overwhelming systems to take websites and services offline, sometimes used alongside ransomware or data theft campaigns.

BET-R Tips to Counter Current Threats:

• Back up your data regularly and securely.
• Use strong, unique passwords and MFA.
• Be skeptical of unexpected emails and phone calls.
• Keep all software and devices updated.
• Review and monitor third-party services carefully.
• Use biometric login options when possible for extra security.

Following these practices can greatly reduce your risk from the latest cyber threats this week [1][2][3][4][5].