Talos Takes: 2025's ransomware trends and zombie vulnerabilities
Summary: Cisco Talos' 2025 Year in Review, discussed on the Talos Takes podcast with Amy and Pierre Cadieux, tracks persistent ransomware targeting the manufacturing sector and the rise of stealthy living-off-the-land tactics. The review also reports that in 2025 attackers increasingly targeted weaknesses in multi-factor authentication workflows and used valid, compromised credentials to launch phishing lures from trusted accounts.
Why it matters: The trends Talos names converge on trust: attackers went after MFA workflows and sent phishing from legitimate, compromised accounts, while also targeting management infrastructure, leaving defenders to tell a system admin apart from a threat actor.
Read the original at Cisco Talos ↗
- Topics
- Threat Actors & Nation-State
- Related
- University of Texas at Arlington warns personal information stolen during cyberattack Cyber Risks · Nov 13, 2026Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files Cyber Risks · Nov 13, 2026Hackers compromise 4,800 GitHub accounts to steal cloud credentials Cyber Risks · Nov 12, 2026