Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

kroll

Paying the Price: Enhancing the Retail Sector's Resilience to Scattered Spider and Cl0p

Nov 26, 2025 By Kroll In Kroll
This is the second in our Retail Resilience series. Check out the first article, Cyber Risk in UK Retail: A Golden Quarter Under Threat Threat actors have retail firmly in their sights. High profile breaches across giants, from Cartier, Co-op and Adidas to Marks & Spencer, underscore just how much is at stake. With sprawling customer data, complex supply chains and relentless digital transformation, the sector is a prime target for sophisticated threat groups.
Read Post
Featured Post
My Black Friday Cybersecurity Wishlist

My Black Friday Cybersecurity Wishlist

Nov 20, 2025 By Chloe Potsklan, Senior Security Researcher In Reach Security
Black Friday and Cyber Monday always bring bargain buys as consumers hunt for deals to make the upcoming festive season special, but they are also a bonanza for cybercriminals. Attacks spike during the holiday season as cybercriminals take advantage of workers being out of their usual routine and less vigilant than normal. This makes for far from happy holidays for the businesses affected. However, what many organizations don't realize is that often they already have the tools to protect themselves in their security armory; they just haven't activated them.
Read Post
wallarm

APIs Are the Retail Engine: How to Secure Them This Black Friday

Nov 19, 2025 By Wallarm In Wallarm
Can you ever imagine the impact on your business if it went offline on Black Friday or Cyber Monday due to a cyberattack? Black Friday is the biggest day in the retail calendar. It’s also the riskiest. As you gear up for huge surges in online traffic, ask yourself: have you protected the APIs on which the business runs?
Read Post
foresiet

Jingle Thief Gift Card Fraud: How Cloud Account Misuse Became a Pandemic for Retailers

Oct 23, 2025 By Foresiet In Foresiet
Jingle Thief gift card fraud is a reminder that attackers don’t always need zero-day bugs or exotic malware to make millions — they need credentials and patience. In 2024–2025, security teams observed a financially motivated cluster (tracked by defenders as “Jingle Thief” / CL‑CRI‑1032) that focused on phishing and identity misuse to quietly harvest access to cloud platforms, then abuse gift-card issuance workflows at scale.
Read Post
cato networks

Meeting the Retail Industry's Evolving Cybersecurity Needs

Oct 12, 2025 By Demetris Booth In Cato Networks
Retailers face increasing cybersecurity threats while navigating stringent compliance requirements. With an extensive digital presence across physical stores, e-commerce platforms, and supply chains, retailers are prime targets for cybercriminals seeking to steal financial and personal data. Ransomware attacks, phishing, and point-of-sale (POS) system breaches can lead to substantial financial and reputational damage.
Read Post
memcyco

Scam-Proofing Loyalty at Scale: What ATO Protection in Retail Should Look Like in 2025

Sep 26, 2025 By Sheena Kretzmer In Memcyco
Retail fraud has gone public. It no longer happens quietly in the background. Today’s scams are faster, sharper, and designed to look exactly like your brand. A spoofed checkout flow can harvest thousands of credentials before your SOC team even sees a spike. But the real damage isn’t always technical. In 2025, one impersonation scam can trigger waves of fake complaints, social media outrage, and reputational backlash that cost far more than the fraud itself.
Read Post
cyberint

Meet Scattered Spider: The Group Currently Scattering UK Retail Organizations

Sep 16, 2025 By Adi Bleih In Cyberint
First published May 8th 2025 Updated Sept 16th 2025 Editor’s Note: This blog builds on our recent analysis of the DragonForce ransomware cartel, which claimed responsibility for a wave of UK retail attacks in April–May 2025. While DragonForce took credit for the extortion and data leak phase, growing evidence suggests that another group—Scattered Spider—may have played a foundational role in enabling those attacks.
Read Post
memcyco

5 of the Biggest Retail Account Takeovers in Recent Years (And How They Could Have Been Stopped)

Aug 22, 2025 By Karim Bennir In Memcyco
Retail account takeover fraud has surged in recent years, with attackers exploiting stored payment details, loyalty points, and digital wallets. This blog analyzes five of the biggest and most impactful retail account takeovers in recent years, evealing how each unfolded, how customers were affected, and how real-time, in-session defenses could have changed the outcome.
Read Post

How Retailers Are Fighting Back Against Fraud with Andy Dean and Christian Reilly

Aug 5, 2025 By Cloudflare In Cloudflare
In this episode of The Connectivity Cloud Podcast with Cloudflare, host Mark Dembo is joined by Andy Dean, Head of Technical Operations at AllSaints, and Christian Reilly, Field CTO of EMEA at Cloudflare, to unpack what real-world digital transformation looks like, specifically how enterprises can navigate the complex balance between security and scalability, from managing multi-vendor environments to modernizing legacy infrastructure.
View Video

Copyright © 2026 OpsMatters™. All rights reserved.