[CLSTR]
< Back to situations

Monitor this situation.

[SITUATION] · [ACTIVE] · [TECHNOLOGY]

3 clusters · 11 sources · 24 days · First seen · Last updated

Global business email compromise and cybersecurity response

Overview

Business email compromise (BEC) remains a dominant cybercrime threat, causing significant financial and operational damage. In 2025, BEC accounted for over $3 billion in losses among nearly 25,000 victims, with specific regional data from Vermont showing 86 crimes totaling $13.1 million in losses.

These breaches typically originate from phishing attempts where employees provide credentials to fraudulent login pages for services like Microsoft 365 or Google Workspace. Once an account is compromised, attackers can access cloud storage, financial documents, and customer communications, often remaining undetected because the account appears to function normally.

Recent data from cybersecurity firm Stoïk indicates a significant surge in activity, reporting a 60% increase in managed cyber incidents in September compared to the period preceding summer. This trend is largely driven by BEC attacks, which rose by 119% between May and September. Experts note that while artificial intelligence has not created new threat types, it has ‘professionalized and lowered the cost of executing attacks,’ allowing less technical actors to operate at scale.

To mitigate these risks, organizations are encouraged to establish incident response plans, robust authentication, and a ‘circle of trust’ to manage legal and regulatory obligations. On a governmental level, the United States has moved to strengthen digital defenses through Executive Order 14390, aimed at disrupting transnational cybercriminal networks, and the Small Business Cybersecurity Assistance Evaluation Act of 2026, which addresses the vulnerabilities of smaller enterprises.

Entities

U.S. Congress · Juan Ignacio Ramallo · Sereno IT Support · Stoïk

Timeline

  1. [TECHNOLOGY] 3 sources
    Cybersecurity sector sees rise in Business Email Compromise attacks

    Business Email Compromise (BEC) attacks rose 119% between May and September, driven by AI making cyberattacks easier and cheaper to execute, according to Stoïk.

  2. [TECHNOLOGY] 3 sources
    Cybercrime causes billions in losses as U.S. strengthens digital defenses

    Cybercrime remains a major economic threat, with business email compromise causing over $3 billion in losses in 2025. U.S. federal authorities are responding with new executive orders and legislation.

  3. [TECHNOLOGY] 5 sources
    Cybersecurity risks and response strategies for business email compromise

    Business email compromise and cyber incidents require proactive response plans, clear chains of command, and rapid identification of phishing to mitigate legal and operational risks.

Sources

animalnewyork.com · dagens.com · dagens.de · enfielddispatch.co.uk · floraldaily.com · grupoaseguranza.com · kpcnews.com · lanuevacronica.com · saferworld.org.uk · techbuzzireland.com · web.eldia.es

This summary has been updated 1 time: see revision history