Advanced threat predictions for 2025

Kaspersky GR&A provides a year-in-review of sophisticated APT activity in 2024 and forecasts for 2025, documenting active exploitation of zero-days (Apple, Android, Chrome), supply-chain compromise (XZ backdoor), resurgence of kernel-level attacks via BYOVD and rootkits, and increased use of botnets, AI-generated phishing/deepfakes, and IoT as attack vectors; it concludes that these trends will continue and evolve, emphasizing greater collaboration among hacktivists, more supply-chain discoveries, and wider adoption of C++/Go and AI-enabled tooling by attackers.