InfoSecBulletin Cybersecurity for mankind
The cybersecurity landscape in 2025 saw an increase in the scale and sophistication of cyber threats. Nation-states, organized crime, and hybrid groups blurred the lines between espionage and financial crime, while supply chain weaknesses and social engineering became major attack methods.
Massive data theft targeting cloud platforms like Salesforce exposed sensitive data from numerous organizations due to third-party compromises and API abuse. Additionally, state-sponsored groups made headlines, such as a $1.5 billion crypto heist linked to North Korea, illustrating the role of digital assets in geopolitical conflicts.
Citrix NetScaler SAML 0-Day Flaw Under Attack
Major Danish university breached, 200,000 users at risk
Microsoft’s X account hijacked to promote Clippy crypto scam
Critical cPanel, GitLab AI Gateway and Dell CSM Flaws Enable RCE And Admin Hijacking
Nearly 100,000 email addresses exposed in first AI-related data breach in Singapore
Hackers Exploit Zimbra Mail Servers: TeamViewer patched 5 critical flaws
Google Warns of Hackers Actively Exploiting Citrix 0-Day Flaws
CISA Warns Critical MikroTik RouterOS Flaw While Cisco SD-WAN Zero-Day Exploited in Attacks
Apple Zero-Day Exploited: Pentagon Data Breach Reportedly Exposes Sensitive Data of 3 Million People
JadePuffer Agentic AI targets and destroys Azure’s cloud resources
APT operations in telecommunications targeted critical infrastructure, highlighting ongoing espionage threats to communication networks. Developer supply chain risks increased as attackers exploited trusted components, and the IoT faced severe botnet attacks, converting everyday devices into attack tools. Social engineering persisted as a major tactic, involving credential scams and advanced manipulation methods.
Industry groups like OWASP have created security guidelines for agentic AI in response to the new threats posed by AI-driven tools, acknowledging that defense strategies must adapt to the evolving technologies used by attackers.
These trends illustrate a cyber threat landscape that is increasingly automated, interconnected, and harmful, requiring not just technical measures but also strategic intelligence and collaboration across sectors.
A list of notable cyber attacks in 2025:
- The Salesforce Data-theft Attacks
- The Continued Salt Typhoon Telco Attacks
- North Korean IT Workers scam
- Rise in Developer Supply Chain Attacks
- Oracle data theft attacks
- The $1.5 billion ByBit crypto heist
- ClickFix Social Engineering Attacks
- Criminal Proxy Network Infects Thousands of IoT Devices
- New Hacking Group Leaks Configuration of 15,000 Fortinet Firewalls
- OWASP Launches Agentic AI Security Guidance
