Cybercriminals targeting Marks & Spencer and Co-op successfully manipulated IT help desks into resetting passwords through sophisticated social engineering tactics. The attack, attributed to groups like DragonForce and Scattered Spider, exploited vulnerabilities in corporate authentication processes. The National Cyber Security Centre warned that these sophisticated techniques demonstrate increasingly complex cybersecurity threats facing UK businesses.