Inside the Talos 2025 Year in Review: A discussion on what the data means for defenders

Cisco Talos’ Year in Review summarizes 2025 threat trends: rapid weaponization of vulnerabilities (e.g., React2Shell), widespread identity-focused attacks including fraudulent device registrations and internal phishing, increased state-linked activity (China-, Russia-, North Korea-, Iran-associated campaigns), and accelerating threats driven by AI automation and agentic malware — emphasizing the need for patching, visibility, segmentation, and identity monitoring.