logo

The biggest cybersecurity and cyberattack stories of 2025

ID: 97c9df58-83b3-5e9d-b448-1991393ce014

STIX ID: report--97c9df58-83b3-5e9d-b448-1991393ce014

Feed Name: Bleeping Computer

Threat Score
92/100

Date Published: 2026-01-01

Date Updated: 2026-04-20

Author: Lawrence Abrams

...
...

This BleepingComputer roundup summarizes the most impactful cybersecurity stories of 2025, covering large-scale data theft and extortion (ShinyHunters, Clop, Salesforce incidents), massive crypto heists linked to Lazarus, widespread zero-day exploitation of enterprise products (Oracle, Cisco, Fortinet, Microsoft SharePoint), record-breaking DDoS attacks (Aisuru), supply-chain and developer-targeting campaigns (npm, VSCode/PyPI abuses, Shai-Hulud), state-aligned campaigns against telecoms (Salt Typhoon), emergent social-engineering TTPs like ClickFix and help-desk compromise, AI/prompt-injection risks, and significant insider/identity-threat schemes.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.