InfoSecBulletin Cybersecurity for mankind
The cybersecurity landscape in 2025 saw an increase in the scale and sophistication of cyber threats. Nation-states, organized crime, and hybrid groups blurred the lines between espionage and financial crime, while supply chain weaknesses and social engineering became major attack methods.
Massive data theft targeting cloud platforms like Salesforce exposed sensitive data from numerous organizations due to third-party compromises and API abuse. Additionally, state-sponsored groups made headlines, such as a $1.5 billion crypto heist linked to North Korea, illustrating the role of digital assets in geopolitical conflicts.
Daily Cyber security update for 25. 10. 2026
Daily Cyber security update for 24. 10. 2026
PHP shares new RCE flaw (CVE 2026-115560) with no patch but mitigation
US banks faced unauthorized access by AI agents in customer accounts: Axios reports
Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager
Hacker claim to access Rajasthan Police data: 70,000 records allegedly exposed
Update now! PHP2Shell: Critical PHP vulnerabilities patched
Trump says data centres should pay dividends to local community
Hackers Actively Exploiting Palo Alto VPN Flaw Via CVE-2026-0257
DeepSeek AI banned by U.S. Government; federal agencies must remove all related tools
APT operations in telecommunications targeted critical infrastructure, highlighting ongoing espionage threats to communication networks. Developer supply chain risks increased as attackers exploited trusted components, and the IoT faced severe botnet attacks, converting everyday devices into attack tools. Social engineering persisted as a major tactic, involving credential scams and advanced manipulation methods.
Industry groups like OWASP have created security guidelines for agentic AI in response to the new threats posed by AI-driven tools, acknowledging that defense strategies must adapt to the evolving technologies used by attackers.
These trends illustrate a cyber threat landscape that is increasingly automated, interconnected, and harmful, requiring not just technical measures but also strategic intelligence and collaboration across sectors.
A list of notable cyber attacks in 2025:
- The Salesforce Data-theft Attacks
- The Continued Salt Typhoon Telco Attacks
- North Korean IT Workers scam
- Rise in Developer Supply Chain Attacks
- Oracle data theft attacks
- The $1.5 billion ByBit crypto heist
- ClickFix Social Engineering Attacks
- Criminal Proxy Network Infects Thousands of IoT Devices
- New Hacking Group Leaks Configuration of 15,000 Fortinet Firewalls
- OWASP Launches Agentic AI Security Guidance
