BotNet News

The global attack surface is expanding as organizations become increasingly interconnected with expanding digital ecosystems. These interdependencies force them to prepare for threats shaped by geopolitical tensions and shifting technological shifts. Adversaries are advancing quickly, outpacing traditional defenses, and 54% of large organizations see supply-chain interdependencies as their biggest barrier to building true cyber resilience.

Data breaches grew larger and more frequent in 2023-2025, impacting worldwide users and causing service outages and financial losses. Many incidents also caused long-term damage to brand reputation and customer trust.

ICMR hack: Stolen information affecting 815 million Indian citizens was offered for sale on the dark web, including Aadhaar IDs and passport details. This breach highlights the risks of password reuse and weak authentication controls. 23andMe hack: Consumer genetics company 23andMe was hacked through credential-stuffing attacks that exposed up to 20 million user profiles in October 2023. The stolen data included genetic ancestry information, and the targeting of Ashkenazi Jewish users illustrated the risks of social engineering. Salt Typhoon telco espionage: Chinese hackers exploited third-party software in the U.S. and other countries to steal call records and private communications, which were then sold on the dark web. This campaign impacted millions of people in dozens of countries, including U.S. federal workers and bank regulators.

Various campaigns leveraging stolen credentials, such as the attack on Marks & Spencer and the breach of Ukrainian government users and retail giants, reflected the growing trend for threat groups to prioritize phishing and credential stuffing over advanced malware. Meanwhile, the exploitation of SAP NetWeaver zero-day vulnerabilities and Microsoft SharePoint by attackers linked to China underscored the importance of patch management.