Missed incidents, persistent threats, and response gaps: Insights from compromise assessment projects

Kaspersky’s 2025 Compromise Assessment findings show widespread missed compromises across sectors caused by long dwell times, poor detection fidelity, unpatched vulnerabilities (notably EternalBlue), web shells in backups, living-off-the-land abuse, remote management tool misuse, and advanced in-memory implants; the report describes multiple malware families and actor-attributed activity, quantifies root causes, and provides prioritized operational recommendations to improve monitoring, threat hunting, patching, and incident response.