Waterfall’s OT Cyber Threat Report 2025 shows that physical-consequence OT attacks continued to rise in impact, with a 146% increase in affected sites and 76 incidents in 2024. The report highlights growing nation-state activity, persistent ransomware pressure, and new ICS-capable malware such as FrostyGoop, IOControl, and Fuxnet, with #Sandworm #VoltTyphoon #SaltTyphoon #FrostyGoop #IOControl #Fuxnet #CrowdStrike #Halliburton #Keytronic #StoliGroupUSA.
Category: Security Report
Vanta’s third State of Trust report shows that AI is accelerating risk faster than most organizations can govern it, while budgets, staffing, and compliance time remain stuck. The report highlights rising vendor breaches, growing trust demands, and the rapid adoption of agentic AI—alongside major gaps in control, readiness, and oversight. #Vanta #agenticAI #AI
Bitsight’s 2025 report shows that global digital supply chains are vast, deeply interconnected, and concentrated around a relatively small set of critical providers that often sit behind major industries and markets. It also finds that provider organizations generally have a larger attack surface and weaker security posture than consumers, while some high-market-share providers still have long-lived vulnerabilities and elevated exposure. #Bitsight #Microsoft #Google #Oracle #jQuery #Cloudflare #CrowdStrike #SolarWinds #ByteDance #Alibaba #Tencent #Huawei
At-Bay’s 2025 InsurSec Report shows that cyber claims rose sharply in 2024, driven by more ransomware, growing third-party losses, and persistent financial fraud. The report highlights major incidents such as the CDK Global outage, the expansion of ransomware groups, and the growing impact of email-based deception. #AtBay #CDKGlobal #MOVEit #LockBit #BlackBasta #BlackSuit
Truesec’s 2025 Threat Intelligence Report shows that cybersecurity investments are helping some large Nordic enterprises reduce ransomware impact, while attackers shift toward smaller organizations, identity-based intrusions, data theft, and AI-assisted social engineering. The report also highlights major law-enforcement disruptions of criminal infrastructure, escalating geopolitical cyber sabotage, and the growing use of ransomware-as-a-service by groups such as BlackCat, LockBit, RansomHub, and Cicada3301. #BlackCat #LockBit #RansomHub #Cicada3301 #Truesec #XZ #Tietoevry #OperationCronos #OperationEndgame #OperationSynergiaII
Europol’s IOCTA 2025 shows how stolen data has become a core commodity in cybercrime, fueling fraud, account takeovers, extortion, and access brokering across dark web forums and encrypted channels. The report highlights the growing impact of infostealers, ClickFix, vishing, and generative AI, while also noting major law enforcement disruptions to Lumma, LabHost, Cracked, and Nulled. #Europol #IOCTA2025 #Lumma #LabHost #Cracked #Nulled #ClickFix #Infostealers
DigiCert’s UltraDDoS Protect report shows a sharp decline in DDoS activity in the first half of 2025, with attackers increasingly favoring short, low-volume, single-target campaigns after enforcement actions such as Operation PowerOff disrupted major DDoS-for-hire services. Financial Services was the most targeted industry, while Saudi Arabia, the United States, and Sweden saw the highest attack volumes, highlighting a shift toward more focused disruption amid a rebuilding phase for threat actors. #UltraDDoSProtect #OperationPowerOff #DigiCert #FinancialServices #SaudiArabia #Sweden
The 2025 Annual Threat Assessment describes a broad and intensifying threat environment in which cyber, criminal, terrorist, and state actors all pressure U.S. security, infrastructure, and economic stability. It highlights major risks from China, Russia, Iran, and North Korea, along with transnational criminal networks and terrorist groups such as ISIS and al-Qa‘ida, and notes how their cooperation makes the global landscape more dangerous. #China #Russia #Iran #NorthKorea #ISIS #alQaida #VoltTyphoon #SaltTyphoon #SinaloaCartel #NewGenerationJaliscoCartel #Hamas #Hizballah #Huthis #SocialDesignAgency #ANODialog #RT
Contrast Security’s 2025 report shows application-layer attacks and exploitable vulnerabilities are growing faster than most organizations can defend against, with attackers exploiting flaws in just days while remediation often takes months. It highlights the need for runtime application defense and better vulnerability prioritization as traditional tools like WAF and EDR leave major blind spots. #ContrastSecurity #ApplicationDetectionandResponse #WAF #EDR
Akamai’s Fraud and Abuse Report 2025 shows AI bots rapidly reshaping fraud, scraping, and abuse across industries, with traffic up 300% year over year and commerce, publishing, and healthcare among the most affected sectors. The report highlights how tools like FraudGPT, WormGPT, GPTBot, ChatGPT-User, Bytespider, and Meta-ExternalAgent are driving new detection and governance challenges, while organizations increasingly rely on monitoring, layered defenses, and risk-based controls to respond. #FraudGPT #WormGPT #GPTBot #ChatGPTUser #Bytespider #MetaExternalAgent #ClaudeBot #OAISearchBot #Akamai #FSISAC
Cyble’s H1 2025 report shows a sharp rise in ransomware, supply chain attacks, and more sophisticated hacktivism, with CL0P, Akira, and Qilin driving a large share of incidents. North America, especially the United States, remained the main target, while industrial and critical infrastructure sectors faced increasingly coordinated threats. #CL0P #Akira #Qilin #MOVEit #GoAnywhereMFT #NHS #ZPentest #DarkEngine #Sector16
Censys’ 2025 State of the Internet Report analyzes adversary infrastructure at Internet scale, showing how malware, C2 services, open directories, and residential proxy networks persist, shift, and evade detection over time. The report highlights Cobalt Strike, Viper, Sliver, PlugX, and PolarEdge as major examples of how threat actors build and maintain infrastructure across global hosting providers and geographies. #CobaltStrike #Viper #Sliver #PlugX #PolarEdge #APT41 #MustangPanda #CVE-2023-20118 #Censys
Black Duck’s 2025 embedded software report shows a sector being reshaped by rapid AI adoption, weak governance, and the rise of SBOMs as a commercial requirement. It also highlights a growing gap between management optimism and engineering reality, alongside a shift toward memory-safe languages and stricter supply-chain and compliance expectations. #BlackDuck #SBOM #Censuswide #MISRA #CERTC #ISO26262 #ISOSAE21434 #EUCyberResilienceAct
The report projects the global cybersecurity market will reach $1 trillion annually by 2031, driven by expanding digital exposure across businesses, governments, IoT, industrial systems, and other connected platforms. It highlights major spending growth, the rising influence of AI, and the widening scope of cybersecurity beyond traditional IT to protect physical and cyber-physical environments. #CybersecurityVentures #EvolutionEquityPartners #Microsoft #Google #Wiz #PaloAltoNetworks #Fortinet #CrowdStrike #Deltek
Salt Security’s report shows that agentic AI adoption is rising quickly, but consumer trust has not kept pace, especially when personal data and chatbot interactions are involved. It emphasizes that APIs are the backbone of AI agent functionality and the main security weak point, making strong governance, monitoring, and access control essential for the future of trusted AI. #SaltSecurity #agenticAI #APIs