[Podcast] It's not you, it's your printer: State-sponsored and phishing threats in 2025
Summary: Cisco Talos' 2025 Year in Review podcast episode covers the rise of internal phishing campaigns that bypass perimeter defenses, including weaponization of Microsoft 365's Direct Send feature. It also describes blended operations by state-sponsored actors from China and North Korea combining zero-day exploits with social engineering, such as the "Dear Leader" interview test and fake developer personas.
Bottom line: Attackers in 2025 leaned on valid, compromised credentials and trusted accounts to launch phishing lures, and targeted weaknesses in MFA workflows - meaning the trust your business operations depend on is the same thing being exploited.
Read the original at Cisco Talos ↗
- Topics
- Phishing & Social Engineering
- Related
- US disrupts North Korean campaign behind $400 million crypto theft Cyber Risks · Nov 14, 2026North Korea ‘s Crypto Theft Operations: DOJ Seizes $1.2 Billion and Disrupts Hacker Infrastructure Cyber Risks · Nov 13, 2026FBI Says North Korean Hackers Stole Over $400 Million in Crypto Using Deepfake Video Calls Cyber Risks · Nov 13, 2026