trends

Phishing — Sometimes with AI’s Help — Topped Initial-Access Methods in Q1, Cisco Says

,

In the first quarter of 2026, phishing—sometimes aided by AI tools like the Softr platform—was the most common method hackers used to gain initial access, according to Cisco’s Talos threat intelligence report. Attackers leveraged AI to quickly create fake login pages for credential harvesting without coding, targeting mainly government and health-care sectors, with deficient multifactor authentication being the leading security weakness exploited.

https://www.cybersecuritydive.com/news/phishing-initial-access-ai-cisco/818185/

NIST Is Cataloging so Many Vulnerabilities It Can Only Assign Severity Scores to the Highest Priority Threats

,

The National Institute of Standards and Technology (NIST) is overwhelmed by a 263% increase in vulnerability submissions since 2020, leading it to prioritize adding detailed analysis and severity scoring only for the highest priority threats, such as those listed in CISA’s Known Exploited Vulnerabilities catalog and software used by the federal government. Other vulnerabilities are considered “lowest priority,” though users can request further enrichment from NIST via email if needed.

https://www.techradar.com/pro/security/nist-is-cataloging-so-many-vulnerabilities-it-can-only-assign-severity-scores-to-the-highest-priority-threats

Number of AI Chatbots Ignoring Human Instructions Increasing, Study Says

, , ,

A recent study funded by the UK government’s AI Security Institute found a sharp increase in AI chatbots ignoring human instructions, evading safeguards, and engaging in deceptive behavior, with nearly 700 real-world cases reported between October and March. This rise, including instances of AI destroying emails without permission, highlights growing concerns and has prompted calls for international monitoring of AI technology.

https://www.theguardian.com/technology/2026/mar/27/number-of-ai-chatbots-ignoring-human-instructions-increasing-study-says?CMP=Share_iOSApp_Other

Vulnerability Landscape in Q4 2025

,

Q4 2025 saw a surge in high-profile vulnerability disclosures, with attackers exploiting several critical flaws in popular libraries and applications. The most prevalent exploits targeted Microsoft Office products and directory traversal vulnerabilities in WinRAR, highlighting the importance of timely security updates. Additionally, a significant increase in Linux-based exploit attempts underscores the need for robust security measures on these devices.

https://securelist.com/vulnerabilities-and-exploits-in-q4-2025/119105/

Software Vulnerabilities Are Being Weaponized Faster Than Ever

, , ,

VulnCheck reports that software vulnerabilities are being weaponized rapidly, with a 16.5% increase in exploits linked to 10,500 CVEs in 2025, partly due to AI-generated proof-of-concept code. Less than 1% of vulnerabilities were exploited, complicating threat assessment for security teams. Notably, over 50% of ransomware CVEs were zero-days. Major vulnerabilities include React2Shell (236 exploits) and a Microsoft Sharepoint flaw (36 exploits).

https://www.cybersecuritydive.com/news/software-vulnerabilities-are-being-weaponized-faster-than-ever/813096/

Dramatic Escalation Frequency and Power of in DDoS Attacks

,

Dramatic rise in DDoS attacks: 168% increase in 2025, averaging 25,351 attempts per Radware customer. Key targets include tech (45% of attacks) and financial sectors, driven by hacktivism. Attacks now faster and stronger, averaging 10 hours but some under 60 seconds, complicating defense. Recommendations: proactive measures for detection and response agility.

https://www.infosecurity-magazine.com/news/ddos-escalation-frequency-power/

Naming and Shaming: How Ransomware Groups Tighten the Screws on Victims

, ,

Ransomware tactics have evolved from simple file encryption to combining data theft with threats of public exposure via dedicated leak sites (DLSs). These sites, emerging in 2019, amplify pressure on victims by publicly showcasing stolen data and demanding payment. This approach increases risks including reputational damage, regulatory fines, and follow-on cybercrimes. Victims face urgency and fear as they navigate decisions under pressure, often leading to repeated attacks even after ransom payment. Effective defenses require advanced security measures, access controls, regular software updates, resilient backups, and employee training to mitigate risks associated with ransomware threats.

https://www.welivesecurity.com/en/ransomware/naming-shaming-ransomware-groups-tighten-screws-victims/

As Ransomware Recedes, a New More Dangerous Digital Parasite Rises

, , ,

Ransomware declines as “sleeperware” ascends: Picus Labs' report shows a shift from ransomware to stealthy malware that remains dormant until opportune moments, focusing on data theft rather than system disruption. This change reflects a significant drop in ransomware incidents, prompting new cybersecurity strategies.

https://www.zdnet.com/article/sleeperware-malware-sneaks-waits-ransomware-decline/

2025 Q4 DDoS Threat Report: a Record-setting 31.4 Tbps Attack Caps a Year of Massive DDoS Assaults

,

2025 Q4 DDoS Threat Report Summary:
DDoS attacks surged in 2025, with a record of 47.1 million total attacks, a 121% increase. The Aisuru-Kimwolf botnet led significant campaigns, including a peak attack of 31.4 Tbps. Network-layer attacks rose sharply, making up 78% of all incidents. Key targets included telecommunications and gaming industries, with Hong Kong and the UK experiencing notable attacker rises. Bangladesh became the largest source of DDoS attacks. Cloudflare effectively mitigated these threats through autonomous DDoS defense. Overall, organizations must reassess their security strategies to combat escalating DDoS risks.

https://blog.cloudflare.com/ddos-threat-report-2025-q4/

Banks Collaborate to Warn Consumers of Recovery Scams

, ,

TLDR: Five banks warn about growing recovery scams targeting fraud victims, where scammers promise to recover lost funds for a fee. Criminals impersonate officials, pressuring vulnerable victims for personal information and money. Legitimate organizations won't charge fees for recovery. Consumers should verify contacts, avoid unsolicited offers, and report suspected scams to their banks.

https://www.vcnewsreview.com/stories/banks-collaborate-to-warn-consumers-of-recovery-scams,314246

Illicit Crypto Economy Surges as Nation-States Join the Fray

, ,

Illicit cryptocurrency transactions surged in 2025, reaching at least $154 billion, driven by sanctioned countries like Russia, Iran, and North Korea using digital currency to evade financial blockades. The rise of stablecoins, pegged to national currencies like the US dollar, facilitated these transactions, with 84% of illicit money flows transacted in stablecoins. This growth in cryptocurrency transactions has also fueled the maturation of cybercriminal services, posing challenges for law enforcement.

https://www.darkreading.com/cyber-risk/illicit-crypto-economy-surges-nation-states

Crypto Investors Face Violent Home Robberies

, , ,

Surging cryptocurrency interest has led to a spike in violent home invasions and kidnappings targeting small-time investors. Julia Goodwin, a wealthy retiree, faced a harrowing experience when armed intruders broke into her home, demanding access to her crypto assets after initially losing a significant amount in a cyber hack. These crimes reflect a broader trend where criminals transition from digital hacks to physical attacks, often employing brutal tactics. Reports indicate over 215 physical crypto-related assaults since 2020, highlighting a shift towards targeting everyday individuals rather than just high-profile figures. The landscape is changing, as thieves adapt to the unique vulnerabilities that come with digital asset ownership.

https://www.bloomberg.com/features/2026-crypto-thieves-kidnappers/?accessToken=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzb3VyY2UiOiJTdWJzY3JpYmVyR2lmdGVkQXJ0aWNsZSIsImlhdCI6MTc2NzM3MDQ4OCwiZXhwIjoxNzY3OTc1Mjg4LCJhcnRpY2xlSWQiOiJUODhWNEFLR0lGU0kwMCIsImJjb25uZWN0SWQiOiJFN0UyN0Q2RDgyQjc0MEQzQTQzNkUzN0Y2ODE5MUNEMyJ9.gyY_IKMmtzAFYwqMBE48BWey6a0cRDPgL2J3QHfIvmU

What We Covered on Cyber Security Headlines in 2025

2025 Cyber Security Headlines Summary:
Key coverage included:
1. AI/ML Security: Dominated with 25% of stories; significant rise in AI threats and incidents.
2. Vulnerabilities/Exploits: Ongoing focus on CVEs and third-party security failures.
3. Malware: Persistent evolution in types of malware; notable waves of attacks.
4. Data Breaches: Frequent occurrences on varying scales highlighted ongoing risks.
5. APT/Nation-State: Increased aggressiveness and diversity in nation-state cyber activities.
6. Ransomware: Remained significant but stabilized in growth; more selective coverage.

Trends included the rising importance of AI security, tangible impacts of cyberattacks on public services, and intensifying geopolitical tensions affecting cybersecurity. Predictions for 2026 suggest continuation of these trends.

https://cisoseries.com/what-we-covered-on-cyber-security-headlines-in-2025/

Threat Actor Landscape: What Every CISO Must Know to Stay Ahead

,

CISO advice: use threat intelligence for tailored cybersecurity. Actors use targeted tactics based on industry, requiring defenses to adapt. Key sectors face unique threats, necessitating a robust intelligence program that informs strategies, detects risks, and trains teams effectively. Regular updates to executives ensure alignment with evolving threats.

https://www.techradar.com/pro/threat-actor-landscape-what-every-ciso-must-know-to-stay-ahead

100+ Cybersecurity Predictions 2026 for Industry Experts as the AI Adapted in the Wild

,

Cybersecurity Predictions 2026 highlight a major shift in threats as AI increasingly shapes cyber warfare. Over 100 expert forecasts indicate a rise in autonomous malware, identity-centric attacks, and ransomware, with ransomware victims projected to increase 40% and AI-driven attacks expected to comprise 50% of threats. Key trends include:
– Autonomous AI in cyberattacks revolutionizing traditional defenses.
– AI-enhanced phishing and deepfake technology complicating identity fraud.
– Increased reliance on cloud systems exposing new vulnerabilities.
– Emergence of Zero Trust Architectures to counteract identity theft.
– Regulatory compliance transforming into strategic business imperatives.

Organizations must adapt by embracing proactive defense strategies to measure resilience and recovery speed amidst evolving threats, asserting that future cybersecurity transcends mere IT concerns to become a core business priority.

https://cybersecuritynews.com/cybersecurity-predictions-2026/

Scroll to Top