Weekly cybersecurity bulletin: the 5 most relevant news (03—07 November 2025)

Like every Friday, at Apolo Cybersecurity we gather the most relevant news of the week in the digital world. Cyberattacks, leaks and advances in artificial intelligence mark a landscape where cybersecurity is consolidated as the fundamental axis of trust and business resilience.

‍

1. Cybersecurity and phishing: the fake “rnicrosoft.com” domain that deceived thousands of users

A phishing campaign impersonated Microsoft using the domain”rnicrosoft.com” (r + n instead of m) to send fake password reset emails. The technique, known as an attack of Homoglyph, demonstrates how attackers exploit visual carelessness to obtain corporate credentials. The email perfectly mimicked Microsoft's aesthetic and redirected to a fake page where victims entered their login details.

‍

2. The cybersecurity flaw in the Louvre that allowed the historic robbery

The Louvre Museum used as a password”LOUVRE” to access internal systems, facilitating an unprecedented theft. The investigation revealed that the flaw affected critical servers and allowed attackers to move undetected for weeks. Authorities confirmed that the breach originated in a poorly protected management system with generic passwords.

‍

3. The cyberattack that left Marks & Spencer with millions of dollars in losses

The British giant suffered a cyberattack which interrupted its online commerce for weeks, causing a 55% drop in its biannual profits. The attack compromised customer data and forced its digital sales platform to be temporarily shut down, and the company acknowledged that the incident affected its logistics and payment systems, generating millions of dollars in losses.

‍

4. Iberdrola's new phishing: this is how the scam that arrives by email works

Una fraudulent campaign replace Iberdrola with emails that simulate false invoices. Upon clicking, users are redirected to websites that install Trojans and steal banking credentials. The messages include the original logo and format of the energy company, which increases its credibility and effectiveness among victims.

‍

5. ING Spain suffers a massive data breach

The entity confirms that an external breach exposed personal information of more than 21,000 customers, including names, IBANs and telephone numbers. Although the incident originated with an external provider, ING had to review its security and communication protocols with those affected. The bank said that no passwords or access credentials were leaked, but sensitive identification and financial data were leaked.

‍

Prevention, your best investment in cybersecurity

Cyberattacks evolve every day, but prevention remains the most effective defense. At Apolo Cybersecurity, we help organizations detect vulnerabilities, train their teams and strengthen their digital resilience to the most advanced threats.

‍