What will you find?
An in-depth analysis of the main cyberthreat trends of the second half of 2025: high‑impact global campaigns, the evolution of ransomware and data‑based extortion, attackers’ use of AI, accelerated exploitation of critical vulnerabilities, and the reconfiguration of the criminal ecosystem following the collapse of major underground forums.
The second half of 2025 confirms a structural shift in attacker behavior: less technical noise, greater persistence, and increased economic and reputational impact. The report highlights several key data points:
- Ransomware is involved in 44% of all security breaches in 2025, consolidating its position as the primary vector for operational and economic impact, compared to 32% recorded in 2024.
- Public administrations and government agencies were once again the most targeted sector, with more than 3,300 incidents reported in the last six months alone, reflecting rising geopolitical cyber tension.
- Artificial intelligence is already present in 16% of attacks, mainly supporting advanced social engineering, campaign automation, and identity impersonation, acting as a multiplier of risk.
- The supply chain and third parties were involved in nearly 30% of incidents, confirming the shift of initial access beyond organizations’ traditional perimeters.