Mishcon de Reya page structure
Site header
Menu
Main content section

Monthly Cyber Threats Report - September 2025

Issue 9: September 2025

Monthly Cyber Threats Report - September 2025

Editor's note

Mark Tibbs
Mark Tibbs

Our monthly report prepares cybersecurity practitioners to make better tactical, operational and strategic decisions. We have distilled analysis of key events from the previous month which have learning points that can be actioned to improve security.

News
technology ai blue

Storm‑0501 evolves to cloud-based ransomware targeting hybrid environments

On 27 August 2025, Microsoft Threat Intelligence reported an evolution in Storm-0501’s campaign. The financially motivated group has shifted from deploying traditional endpoint ransomware to conducting cloud-based ransomware operations in hybrid environments - meaning attacks now target both on-premises servers and cloud services like Microsoft 365 or Azure. Instead of just locking files on a single computer, Storm-0501’s approach lets them reach deeper into an organisation’s infrastructure, including shared cloud data and backups.

Subscribe

Never miss a publication by signing up to our mailing list

Monthly Cyber Threats Report - September 2025 Issues

How can we help you?
Help

How can we help you?

Subscribe: I'd like to keep in touch

If your enquiry is urgent please call +44 20 3321 7000

I'm a client

I'm looking for advice

Something else