August 18, 2025
While your team stays focused on day-to-day operations, cybercriminals remain relentlessly active every month of the year. Research from ProofPoint and Check Point reveals a consistent surge in phishing attacks tied to major events and behavioural trends—not just specific seasons. Here's how to stay vigilant and secure your business no matter the time of year.
Why Are Cyber Threats on the Rise?
Hackers often capitalise on major events, travel periods, and educational cycles. According to Check Point Research, attackers increasingly mimic trusted travel sites like Airbnb and hotel booking platforms to lure unsuspecting users. In May 2025 alone, there was a 55% rise in new travel-related website domains—of which 1 in 21 was flagged as suspicious or outright malicious.
The back-to-school period also sparks an increase in phishing emails disguised as legitimate university communications, targeting both students and staff. Even if your business isn't directly related to education or travel, employees checking personal emails on work devices can open the door to system-wide cyber threats with just one careless click.
Smart Strategies to Protect Your Business
While AI helps strengthen cybersecurity systems, it also enables attackers to craft more convincing phishing messages. That's why it's critical to educate your team on how to spot and avoid these threats.
Use these practical safety tips to safeguard your business:
Be alert to suspicious emails. Don't rely solely on spelling or grammar to spot scams—AI-generated phishing emails can be polished. Always check the sender address and hover over links before clicking.
Check URLs closely. Watch for small typos or unusual domain endings like .today or .info, which are often used for scams.
Go directly to websites. Instead of clicking links from emails, type the address into your browser to avoid phishing traps.
Enable Multifactor Authentication (MFA). This extra layer of protection makes it significantly harder for attackers to access your accounts, even with stolen passwords.
Be cautious on public WiFi. Use a VPN when accessing business tools or financial accounts on public networks.
Keep personal and work emails separate. Avoid checking personal email on work devices to minimise exposure to hidden threats.
Talk to your MSP about endpoint protection. Endpoint Detection and Response (EDR) solutions can block phishing attempts, monitor for unusual activity, and alert your IT provider before any damage is done.