​Late November in the US marks a slowdown for most organisations. Early November if you’re in Australia post the famous Melbourne Cup horse race. Teams thin out from then onwards. Decision making compresses. Attention shifts elsewhere. For attackers, it’s a window. The Semperis 2025 Holiday Ransom Report reinforces a reality security leaders already know but rarely plan for well enough. “Cyber risk doesn’t take time off, even when we desperately want to,” says Simon Hodgkinson, Senior Advisor at Semperis. If anything, threat activity accelerates when defenders are stretched. “Cyber is a cat and mouse game,” Hodgkinson adds. “Both defence and offence will be changing their tactics… pretty much ...