Enterprises Need to Beware of These 5 Threats

SANS Institute panelists at RSAC 2025 warned that attackers are exploiting authorized-user privileges, single sign-on tokens, and browser-based access to pivot across environments, that ransomware against ICS/OT is increasing with potential physical impacts, that poor logging practices enable attackers to operate undetected, and that AI is accelerating phishing and reconnaissance—citing examples such as Scattered Spider and high-profile crypto thefts to illustrate the evolving threat landscape and defensive gaps.