17 Oct Security Report – 17 Oct 2025
Many businesses view cybersecurity as a series of large expenses — firewalls, endpoint protection, new licenses and consulting work. This mindset makes it easy to believe that security carries a heavy price tag. The truth is that when security tools are isolated, duplicated or purchased reactively, budgets increase without improving protection. A better approach is to use an integrated solution that grows with your needs and is easy to monitor. When all your security tools work together in one system, protection becomes simpler to manage and more affordable. An integrated system eliminates much of this waste. Instead of retrofitting multiple tools, it combines endpoint protection, patching, backup and automation into one platform. This brings clear, measurable advantages.
Recent Breaches
Australia & New Zealand – Qantas – Aerospace & Defense
Exploit: Third-Party Data Breach
Risk to Business: Moderate: On October 12, 2025, Qantas Airways confirmed that hackers had released the personal data of more than 5.7 million customers on the dark web. Qantas is among many global companies — including Toyota, Disney, Ikea, Air France and KLM — targeted by the hacker collective Scattered Lapsus$ Hunters. The group reportedly stole nearly 1 billion records in July by targeting customers of cloud technology giant. While the hackers did not breach Salesforce itself, they instead impersonated legitimate Salesforce employees in calls to IT helpdesks of the affected companies to gain access. In Qantas’ case, a call center in the Philippines was reportedly exploited to obtain access. The exposed passenger data includes dates of birth, phone numbers, addresses, emails and frequent flyer numbers. Qantas confirmed that no credit card, financial or passport details were compromised and that frequent flyer accounts remain secure.
United States – SonicWall – Technology
Exploit: Hacking
Risk to Business: Moderate: SonicWall’s disclosure last month of a data breach on its cloud backup service appears to be far more serious than initially believed. On October 8, following a full investigation conducted with Google’s Mandiant, SonicWall announced that an unauthorised party accessed firewall configuration backup files for all customers who have used SonicWall’s cloud backup service. This is a significant escalation from the company’s earlier assessment on September 17, when it believed only 5% of its firewall install base was affected. Meanwhile, SonicWall reaffirmed that the exposed files contain encrypted credentials and configuration data. The company urges all customers to log in and review their devices immediately. It has also started notifying partners and users directly and released tools to help assess and remediate affected systems.
Talk to a TCT team member today about implementing IT strategy plan for your business.
Robert Brown
17/10/2025
Related Articles:
Secure AI and Productivity
Stable Connection Is Essential for Your Business