This month in security with Tony Anscombe – June 2025 edition

From Australia's new ransomware payment disclosure rules to another record-breaking DDoS attack, June 2025 saw no shortage of interesting cybersecurity news

28 Jun 2025

It's that time of month when ESET Chief Security Evangelist Tony Anscombe looks at the most impactful cybersecurity news of the past 30 or so days. Here's some of what caught his eye in June 2025:

• new legislation in Australia that mandates that certain organizations report ransomware payments within 72 hours from making them or else face potential penalties,
• North Korea-aligned threat actor BlueNoroff leveraging deepfakes of company executives to trick employees into installing custom malware on their macOS devices during Zoom calls,
• Scattered Spider hackers, who recently targeted retail organizations in the UK before setting their sights on the same sector in the US, are now going after US insurance companies,
• a record-breaking (distributed denial-of-service) DDoS attack that peaked at 7.3 ...