From credit bureaus to software providers, 2025 saw attackers bypass bank defenses by targeting the supply chain and using social engineering.