Major October 2025 Cyber Attacks Your SOC Can't Ignore
Essential information
- Published
- 29/10/2025 18:37
- Modified
- 29/10/2025 20:18
- Tags
- 2025-10-29 clickup cloud abuse credential-theft figma google careers lockbit lockbit 5.0 phishing ransomware tykit
- Related entities
- 10 observables, 18 techniques (mitre), 13 others
Description
October 2025 saw a surge in sophisticated cyber attacks, including phishing campaigns exploiting Google Careers and ClickUp, abuse of Figma for credential theft, the emergence of LockBit 5.0 targeting ESXi and Linux systems, and the discovery of TyKit, a new phishing kit. Attackers increasingly abused legitimate cloud platforms and employed multi-stage redirection techniques to evade detection. These threats pose significant risks to corporate credentials, infrastructure, and data across various sectors. Security teams must enhance visibility, harden access controls, ensure resilience, and leverage advanced threat intelligence tools to detect and respond to these evolving threats effectively.