H1 2025 Malware and Vulnerability Trends

H1 2025 intelligence from Insikt Group / Recorded Future describes a rapidly evolving threat landscape: a 16% rise in disclosed CVEs with 161 actively exploited (many unauthenticated and RCE), targeted attacks against Microsoft and edge/gateway appliances, resurgence of legacy malware (Sality, Tofsee), increased RAT activity, growing mobile and NFC relay fraud, persistent Magecart skimming, and ransomware groups innovating affiliate models and evasive deployment techniques; the report details observed TTPs, actor attributions, detection telemetry, and prioritized mitigation guidance.