InfoSecBulletin Cybersecurity for mankind
Check Point data reveals a 60% increase in ransomware attacks, with North America and Europe being the primary targets. The rise in enterprise Gen AI use has also exposed sensitive data. In 2025, ransomware attacks stood out for their volume, scale, and damage.
The December 2025 Global Cyber Attack Statistics from Check Point show that organizations faced an average of 2,027 attacks per week, a 9% increase from December 2024. In the UK alone, each organization suffered 1,440 cyber attacks per week, a rise of 39%.
Citrix NetScaler SAML 0-Day Flaw Under Attack
Major Danish university breached, 200,000 users at risk
Microsoft’s X account hijacked to promote Clippy crypto scam
Critical cPanel, GitLab AI Gateway and Dell CSM Flaws Enable RCE And Admin Hijacking
Nearly 100,000 email addresses exposed in first AI-related data breach in Singapore
Hackers Exploit Zimbra Mail Servers: TeamViewer patched 5 critical flaws
Google Warns of Hackers Actively Exploiting Citrix 0-Day Flaws
CISA Warns Critical MikroTik RouterOS Flaw While Cisco SD-WAN Zero-Day Exploited in Attacks
Apple Zero-Day Exploited: Pentagon Data Breach Reportedly Exposes Sensitive Data of 3 Million People
JadePuffer Agentic AI targets and destroys Azure’s cloud resources
“December’s data shows that cyber risk is no longer about isolated spikes, but continuous pressure,” says Mark Weir, Regional Director, UK and Ireland at Check Point Software.
“Ransomware continues to scale through industrialised operations, while unmanaged Gen AI usage is creating widespread data exposure at the enterprise level.
“Moving into 2026, organisations must prioritise prevention-first security, real-time AI threat intelligence and strong governance over how AI tools are used across the business.”
Qilin the major culprit:
December 2025 had 945 reported ransomware incidents, up 60% from December 2024. Check Point’s report reveals that over half (52%) of ransomware incidents happened in North America, while Europe accounted for 23%. This highlights cybercriminals’ focus on valuable areas.
A Russian cybercrime group called Qilin, which provides Ransomware-as-a-Service, was the most active in December. They were responsible for 18% of publicly reported ransomware attacks.
RaaS cybercrime groups LockBit5 and Akira were major players, responsible for 12% and 7% of cyber attacks, respectively. Ransomware groups continue to target Windows, Linux, and ESXi virtual environments, according to the report.
Education, government and non-profits the main targets:
Check Point’s data shows education faced the highest number of cyber attacks globally, averaging 4,349 per week. Government institutions experienced 2,666 attacks weekly, while non-profit organizations faced an average of 2,509 attacks.
Aging infrastructure and resource shortages make enterprises vulnerable to cyber attacks, and a new threat called Gen AI is increasing this risk.
Quickly used and trusted to enhance productivity, data shows that an average of 11 different Gen AI tools are used by employees, creating massive enterprise security flaws.
“Even as AI tools drive unprecedented productivity, we are simultaneously stepping backward in security because organisations are integrating them faster than they secure them,” says Nataly Kremer, Chief Product Officer (CPO) at Check Point Software Technologies.
“At Check Point Software Point, we see this first hand. In just one month, our teams identified about ten significant vulnerabilities across widely used AI tools.”
Check Point’s research indicates that one in every 27 Gen AI prompts from company networks risks leaking sensitive data. The report shows that most organisations using Gen AI tools face high-risk prompt activity.
As one in four (25%) prompts may expose sensitive information, the rise of unofficial AI use by employees significantly raises the chance of companies experiencing AI-related cyber attacks.
