Loading story…
Major cybersecurity vendors and analysts released comprehensive reports and predictions summarizing the most significant trends, risks, and technological shifts observed in 2025. Cloudflare's annual Year in Review emphasized a dramatic increase in global internet traffic, the growing adoption of post-quantum encryption, and a surge in record-breaking DDoS attacks, reflecting both the opportunities and threats posed by rapid digital transformation. Trend Micro's Defenders Survey Report, based on responses from over 3,000 cybersecurity professionals worldwide, identified cloud and AI as key risk factors, underscoring the mounting pressures on security teams and the need for holistic risk management strategies.
Industry thought leaders and security experts also provided forward-looking perspectives and practical guidance. Omdia analysts outlined five network security predictions for 2026, with a strong focus on the integration of AI and the evolution of zero trust architectures. Red Hat security experts advocated for the adoption of established frameworks like MITRE ATLAS and NIST to address the unique risks associated with AI systems, while Cato Networks' CISO shared actionable advice for cybersecurity professionals, emphasizing the importance of thinking like an attacker and fostering diverse skill sets. Collectively, these reports and expert insights offer a multifaceted view of the evolving cybersecurity landscape, highlighting both the challenges and the proactive measures organizations are taking to adapt.
Track how attackers are adapting to this technology.
5 events from the most recent confirmed update back to the earliest known activity.
Dark Reading published an interview with Etay Mayor of Cato Networks discussing attacker-minded security, AI-driven threat intelligence, and cybersecurity education. The piece also noted his work building Cato's Cyber Threats Research Lab and promoting hands-on learning for technical and non-technical students.
TechTarget published an opinion piece presenting five network security predictions for 2026. No additional factual event details were provided in the reference synopsis.
Red Hat published guidance urging organizations to apply existing standards and frameworks such as MITRE ATLAS, the NIST AI RMF, OWASP, ISO/IEC 42001:2023, and ISO/IEC 23894:2023 to harden AI systems. The article emphasized risks including data poisoning, model evasion, model theft, supply chain issues, and ethical misuse.
Trend Micro published its 2025 Defenders Survey Report based on responses from more than 3,000 cybersecurity professionals in 88 countries. The report highlighted hybrid cloud dependence, AI-driven threats such as deepfake impersonation and BEC, and persistent workforce and incident response readiness gaps.
Cloudflare released its 2025 Year in Review summarizing major Internet trends observed across the year, including 19% year-over-year traffic growth, increased cyber conflict, and broader use of post-quantum encryption. The report said post-quantum cryptography protected 52% of human Internet traffic and documented more than 25 record-breaking DDoS attacks during 2025.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
5 references tracked. Mallory keeps watching after this page renders.
securitysenses.com
Open sourcetechtarget.com
Open sourcedarkreading.com
Open sourceredhat.com
Open sourcetrendmicro.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Cybersecurity experts and industry reports highlight evolving threats and persistent challenges as organizations prepare for 2026. Attackers are increasingly exploiting misconfigurations, leveraging AI-driven social engineering, and taking advantage of complex, rapidly changing cloud environments. Despite technological advancements, human error and configuration drift remain leading causes of breaches, with automation and policy enforcement recommended as key mitigations. The financial services sector, while showing improved prevention effectiveness due to regulatory pressure and investment, still faces critical weaknesses at specific attack stages, underscoring the need for continuous validation and adaptive controls. Industry commentary and newsletters reflect on the rapid pace of change, with significant M&A activity, the growing impact of AI on cybersecurity strategies, and ongoing struggles with vulnerability management and software supply chain security. The sector is urged to address these systemic issues by adopting risk-based approaches, improving transparency, and integrating new frameworks such as the OWASP Agentic AI Top 10. As organizations look ahead, the consensus is that while progress is being made, the threat landscape is becoming more sophisticated, requiring ongoing vigilance and innovation.
Jun 29, 2026The cybersecurity landscape in 2025 saw significant evolution, with a marked increase in supply chain attacks targeting CI/CD pipelines, open source packages, and developer tooling. Organizations like StepSecurity reported detecting and responding to some of the most consequential supply chain compromises before they became public, highlighting the need for real-time visibility and enforcement across software supply chains. The year also witnessed rapid growth in the adoption of security solutions, as enterprises sought to protect their development environments and open-source repositories from increasingly sophisticated threats. Simultaneously, the industry experienced major shifts in technology and risk management. Startups drove innovation in browser security, application security for AI-generated code, and SOC automation, reflecting the growing importance of cloud-based workspaces and AI-driven applications. On the risk management front, CISOs faced a tightening cyber insurance market, with insurers demanding more rigorous proof of security controls and warning that major supply chain or AI-related incidents could quickly harden underwriting standards. These developments underscore the need for organizations to adapt their security strategies to address both emerging technical threats and evolving risk management requirements.
Jun 29, 2026
The cybersecurity landscape in 2025 was marked by a series of high-impact incidents and evolving threat trends, with identity-driven intrusions, large-scale breaches, and record-breaking DDoS attacks dominating the year. Notable breaches at organizations such as Ingram Micro, Conduent, and Kettering Health resulted in hundreds of millions of dollars in losses, with regulatory filings and industry analyses highlighting the significant operational and financial impacts. Attackers increasingly exploited known vulnerabilities, with the CISA Known Exploited Vulnerabilities (KEV) catalog serving as a critical indicator of attacker intent, and legacy flaws resurfacing as major risk factors. The year also saw a strategic shift in security operations, with organizations prioritizing risk-based decision-making over exhaustive control coverage, and automation and real-time intelligence becoming essential for defense. DDoS attacks reached unprecedented scales, with Cloudflare reporting attacks peaking at 31 Tbps and the emergence of massive botnets like Aisuru. These attacks were often used as smokescreens for deeper intrusions, and the growing sophistication and speed of DDoS campaigns rendered traditional scrubbing-center defenses increasingly obsolete. Geopolitical tensions further shaped the threat landscape, with critical infrastructure and sectors such as gaming and gambling frequently targeted. The industry’s response emphasized the need for adaptive, globally distributed mitigation strategies and highlighted the importance of governance, consent management, and just-in-time administration to separate resilient organizations from those more vulnerable to systemic risk.
Jun 29, 2026