Arctic Wolf 2025 Security Operations Report Reveals Threat Landscape Acceleration, Majority of Security Alerts Now Occur Outside Working Hours

Arctic Wolf's 2025 Security Operations Report analyzes telemetry from the Aurora Platform and its AI-powered SOC across 10,000 organizations, finding that adversaries are accelerating tactics by exploiting identity, timing, VPNs and specific vulnerabilities (notably Fortinet FortiGate and SonicWall CVE-2024-40766) to escalate privileges and rapidly encrypt unmonitored systems; the report also highlights 24×7 attack timing, AI-driven alert triage benefits, industry targeting patterns, and recommended operational priorities for CISOs.