The Uncomfortable Truth About
Summary: Organizations faced an average of 1,968 cyber attacks per week in 2025, an 18% year-over-year increase and nearly 70% since 2023, while ClickFix-style activity rose roughly 500% and appeared in nearly half of documented malware campaigns. The report describes an "action gap" in which attackers move from discovery to exploitation in hours while organizations take days or weeks to coordinate remediation, with only about 50% of identified exposures remediated annually and a mean time to remediation of 3.5 days.
Bottom line: Qilin became the most active ransomware operator of the year with over 1,000 published victims by recruiting displaced affiliates, and Cl0p's exploitation of enterprise file-transfer and ERP software produced some of the year's highest victim counts - a reminder that the window between a known weakness and its exploitation is now measured in hours, not review cycles.
Read the original at The Hacker News ↗
- Topics
- Phishing & Social Engineering
- Related
- US disrupts North Korean campaign behind $400 million crypto theft Cyber Risks · Nov 14, 2026North Korea ‘s Crypto Theft Operations: DOJ Seizes $1.2 Billion and Disrupts Hacker Infrastructure Cyber Risks · Nov 13, 2026FBI Says North Korean Hackers Stole Over $400 Million in Crypto Using Deepfake Video Calls Cyber Risks · Nov 13, 2026