Key Cybersecurity News: Weekly Summary of Attacks and Threats (25-29 August 2025)

The last week of August 2025 confirmed a worrying escalation in the frequency and intensity of cyberattacks worldwide. From the serious incident in Nevada to the attack on Elche City Hall, to alerts about juice jacking and new ransomware campaigns, the cybersecurity landscape shows that both governments and private companies continue to be priority targets for cybercriminals. This weekly summary provides you with the keys to understanding current threats and strengthening your digital protection.

‍

Highlighted incidents of the week

Nevada paralyzed by a massive cyberattack

• The State of Nevada suffered a targeted attack that rendered its government systems inoperative, forcing the closure of public offices, including the DMV.
• The incident has alerted the vulnerability of critical state infrastructure in the United States and has activated federal emergency protocols.

Elche: a new blow to the Spanish public sector

• The City Council of Elche joins the list of Spanish councils that are victims of ransomware, with the total shutdown of computer services and the suspension of administrative deadlines.
• Spain maintains its position among the five countries most affected by ransomware, with recent cases in Melilla, Badajoz, Níjar and Vila Joiosa.

Alcampo affected by problems in its systems

• The hypermarket chain experienced interruptions in orders and supplies due to a security incident that affected its logistics systems.

‍

Alarming trends and statistics

Global ransomware explosion

• They registered 59 new victims of ransomware only in the last 48 hours, according to CronUp monitoring.
• Groups such as Qilin, Akira, DragonForce and Cephalus are highly active, attacking everything from legal firms to technology companies.
• Spain is experimenting Average 2,057 weekly attacks in July, 20% more than in 2024.

NoName057 (16) leads the malicious activity

• This pro-Russian group claimed 54 attacks in the last week, consolidating itself as the most active threat in the world.
• Its DDoS campaigns continue to target European, especially Spanish, government infrastructures.

‍

New emerging threats

Juice Jacking: the hidden danger in public chargers

• Mexico City authorities warned about this modality that steals data through manipulated USB ports in charging stations.
• The technique is expanding internationally, putting millions of users who charge their devices at airports and shopping centers at risk.

Artificial intelligence as a criminal weapon

• The massive use of AI to automate attacks, generate personalized malware and create more sophisticated disinformation campaigns is confirmed.
• Emergence of automatically generated AI-powered malware affecting more than 1,500 users of crypto platforms.

‍

Critical vulnerabilities detected

• CVE-2025-43300 (Apple): Zero-day actively exploited against Apple users.
• CVE-2025-9074 (Docker Desktop): Critical vulnerability that allows Windows hosts to be fully compromised.
• CVE-2025-9478 (Chrome): Critical flaw that allows arbitrary code execution.

‍

Apolo Cybersecurity Urgent Recommendations

• Immediately update systems with patches for detected critical vulnerabilities.
• Avoid using public USB chargers; use direct power adapters or your own power banks.
• Implement incident response protocols and offline backups.
• Train employees on new social engineering and phishing techniques.
• It reinforces network segmentation and monitoring of anomalous activities.

‍

🛡️ Request your free consultancy with Apolo Cybersecurity and strengthen your digital defense

The week of August 25-29 confirms the acceleration of cyber threats in all sectors. The combination of state attacks, sophisticated ransomware, and new techniques such as juice jacking requires a coordinated response between the public and private sectors. Only anticipation, training and advanced technology can address this growing risk landscape.

‍