32% of top-exploited vulnerabilities are over a decade old

Cisco Talos' 2025 Year in Review finds attackers rapidly weaponize new vulnerabilities (e.g., React2Shell) while long-lived flaws like Log4Shell remain actively exploited; ransomware persists with groups such as Qilin, Akira, and Play focusing on identity-based access, MFA attacks and phishing continue to target business workflows, and AI is amplifying social engineering even as defenders apply AI for alert triage.