Supply Chain Attacks Surge In April–May 2025

This Cyble analysis shows a growing wave of software supply-chain attacks through May 2025 (79 incidents in the first five months), with IT/telecoms heavily targeted and incidents spanning ransomware-led extortion, large-scale data exfiltration, and unauthorized cloud/portal access across the US, Europe, APAC, and MENA; the report documents ten notable supply-chain incidents and recommends defensive controls such as CI/CD security, microsegmentation, strong access controls (MFA, machine authentication), encryption, immutable backups, API/cloud configuration hygiene, SIEM/DLP monitoring, and routine auditing.