InfoSecBulletin Cybersecurity for mankind
The cybersecurity landscape in 2025 saw an increase in the scale and sophistication of cyber threats. Nation-states, organized crime, and hybrid groups blurred the lines between espionage and financial crime, while supply chain weaknesses and social engineering became major attack methods.
Massive data theft targeting cloud platforms like Salesforce exposed sensitive data from numerous organizations due to third-party compromises and API abuse. Additionally, state-sponsored groups made headlines, such as a $1.5 billion crypto heist linked to North Korea, illustrating the role of digital assets in geopolitical conflicts.
CISA alerts to cyberattacks affecting U.S. water utilities
“CyberStrike” AI-Driven Security Platform for Automated Testing
AIDCQ Propose to invest $2 billion in AI data center in Bangladesh
NVIDIA BlueField Flaw Enables Code Execution Attacks
Massive customer data from India’s Bank of Baroda surfaced online
Active Exploits Hit Fortinet, Arista: AI Discovered Linux Kernel Zero-Day
Sam Altman Claims AI “singularity” has arrived, Where Systems Improve by Themselves
Shinyhunters claimed and set deadline to publish E&Y data
Microsoft, NVIDIA and CrowdStrike Initiate Alliance for Open-Source AI Security
Google Search Results Reportedly Show Claude AI Shared Chats
APT operations in telecommunications targeted critical infrastructure, highlighting ongoing espionage threats to communication networks. Developer supply chain risks increased as attackers exploited trusted components, and the IoT faced severe botnet attacks, converting everyday devices into attack tools. Social engineering persisted as a major tactic, involving credential scams and advanced manipulation methods.
Industry groups like OWASP have created security guidelines for agentic AI in response to the new threats posed by AI-driven tools, acknowledging that defense strategies must adapt to the evolving technologies used by attackers.
These trends illustrate a cyber threat landscape that is increasingly automated, interconnected, and harmful, requiring not just technical measures but also strategic intelligence and collaboration across sectors.
A list of notable cyber attacks in 2025:
- The Salesforce Data-theft Attacks
- The Continued Salt Typhoon Telco Attacks
- North Korean IT Workers scam
- Rise in Developer Supply Chain Attacks
- Oracle data theft attacks
- The $1.5 billion ByBit crypto heist
- ClickFix Social Engineering Attacks
- Criminal Proxy Network Infects Thousands of IoT Devices
- New Hacking Group Leaks Configuration of 15,000 Fortinet Firewalls
- OWASP Launches Agentic AI Security Guidance
