Infosecurity's Top 10 Cybersecurity Stories of 2025

A year-in-review roundup highlighting major 2025 cybersecurity developments: active exploitation of a critical Fortinet zero-day, a criminal proxy botnet infecting thousands of IoT devices, a 15,000‑device Fortinet configuration/data leak attributed to a hacking group, an npm supply‑chain compromise installing a crypto‑clipper that was rapidly mitigated, and new tactics such as QR‑code ‘quishing’ and LLM jailbreak techniques; the report also notes vendor withdrawals from MITRE evaluations and new industry guidance and metrics (NIST LEV, OWASP agentic AI guidance).