2025 was marked by significant cybersecurity incidents including high-profile data breaches, advanced cyberattacks, and increasingly sophisticated threat actor activities. Notable events include the PornHub data breach, the ByBit crypto heist, and the rise of AI-powered attacks. #PornHubDataBreach #ByBitCryptoHeist #AIpromptInjections
Keypoints
- The PornHub data breach involved the theft of over 200 million users’ viewing activity data by the ShinyHunters extortion gang.
- Cybercriminals and state-sponsored actors expanded social engineering with campaigns like ClickFix, targeting Windows, macOS, and Linux systems.
- The $1.5 billion ByBit crypto theft was attributed to North Korea’s Lazarus group, exploiting compromised developer devices.
- Oracle servers were compromised through zero-day vulnerabilities, leading to widespread data theft affecting universities and corporations.
- AI-driven attacks increased, with hackers leveraging large language models to automate exploits, generate malware, and bypass security defenses.