Cisco Talos 2025 Year in Review
Summary: Cisco Talos's 2025 Year in Review reports that attackers increasingly targeted weaknesses in multi-factor authentication workflows, and that phishing attacks used valid, compromised credentials to send lures from trusted accounts. The year was marked by sustained attacks on infrastructure built on older dependencies such as Log4j and PHPUnit, while React2Shell reached the highest percentage of attacks for the year within its final three weeks.
Bottom line: Talos ties the year's trends to trust in everyday business operations, and notes that January is the least active month for ransomware activity, which may give defenders a window to test readiness.
Read the original at Cisco Talos ↗
- Topics
- Identity & Access Management
- Related
- FBI flash alert says Artex tool automating cyberattacks at ‘machine speed’ Cyber Risks · Nov 13, 2026Connect Wise Cloud Backup application abused in cross-tenant token sweep Cyber Risks · Oct 19, 2026Sponsored: Specter Ops on the impact of AI agents on Blood Hound Cyber Risks · Sep 20, 2026