Cyber Bulletin May Edition 2025

Cyber risks increased in May because of focused surveillance and espionage efforts. Pegasus 2.0 Spyware gained complete device control of journalists and political people by taking advantage of zero-click iOS vulnerability. The GravityRAT Sensitive user data was stolen from Android smartphones throughout South Asia by malware masquerading as encrypted apps. Chinese APTs use fictitious profiles on LinkedIn to influence military personnel and obtain confidential data. FinSpy Backdoors used iMessage flaws to monitor people in the media and legal industries. Concerns about unethical monitoring were rekindled with the return of NSO Spyware, which was licensed under aliases, and Zero-Click iMessage Spyware, which secretly targeted activists using keylogging and webcam access. To counter these threats organizations, implement Lockdown Mode on iOS, use hardened OS settings, implement frequent software updates, regulate secure communication practices, and make ongoing investments in threat monitoring and cyber awareness to combat complex threats.