The Year Ransomware Went Fully Decentralized: Cyble’s 2025 Threat Analysis

Cyble’s 2025 Annual Threat Landscape Report documents a volatile, rapidly evolving cybercrime ecosystem driven by a surge in ransomware and extortion activity, widespread data breaches and access sales, affiliate mobility across RaaS programs, and growing use of AI to accelerate intrusion and negotiation workflows; it highlights supply-chain exploitation (notably CVE-2025-61882), sectoral impacts across healthcare, manufacturing, government and IT, and persistent operational resilience despite intensified law enforcement disruption.