Cybercriminals Accelerate Exploitation Of Identity Systems

Cisco Talos published a 2025 year-in-review on Monday, finding attackers increasingly rapid in exploiting newly disclosed vulnerabilities and using AI to craft phishing. Talos said December's React2Shell became the year's most-targeted vulnerability, 40% of intrusion responses began with phishing, and 75% of phishing messages used spoofed or compromised accounts. The report urges fast patching and prioritizing identity and access controls, MFA, and anti-phishing training.