Contact us

Insights & Resources

•

Navigating the New Era of Cyber Threats

Navigating the New Era of Cyber Threats

Filed under

As we settle into 2025, the cyber threat landscape has grown not just more sophisticated, but more interconnected. The latest Verizon Data Breach Investigations Report (DBIR) paints a complex picture, revealing that data breaches are no longer just a product of internal failings or direct hacks. Increasingly, third-party vulnerabilities, automation and organizational blind spots are driving modern breaches.

Key Takeaways Leaders Must Act On:

Third-Party Risk Is Now Mainstream

With 30% of breaches involving a third-party, double from the previous year, organizations must shift their mindset from isolated perimeter security to holistic ecosystem vigilance. The MOVEit and Snowflake-related incidents exemplify how even unexploited services can become breach catalysts.

Exploits Are Outpacing Patching

The exploitation of vulnerabilities surged by 34%, with edge devices and VPNs becoming prime targets. Alarmingly, only 54% of these vulnerabilities were fully remediated throughout the year. Organizations must prioritize automated patching, zero-trust architectures and secure-by-default solutions to enhance protection against these exploitations.

Ransomware Remains Rampant

Now present in 44% of breaches, ransomware continues to evolve. Notably, small- and medium-sized businesses (SMBs) are disproportionately affected, with an 88% ransomware involvement rate. This speaks to a broader issue: attackers are targeting the unprepared.

Stolen Credentials and BYOD Chaos

The use of credentials obtained through infostealers has exploded. Nearly half of compromised systems were non-managed devices, highlighting the growing risks of BYOD programs and unmanaged endpoints.

AI’s Double-edged Sword

While generative AI hasn’t revolutionized cyber threats (yet), its use in crafting phishing emails has doubled, and misuse of corporate data on AI platforms is a ticking time bomb. Alarmingly, 72% of employees accessing GenAI systems did so with non-corporate emails, bypassing oversight.

Strategic Implications for the C-Suite:

  • Cybersecurity has evolved into supply chain strategy. Vendor relationships must be governed by cyber due diligence, with security outcomes factored into the procurement processes.
  • Resilience must go beyond recovery. As the line between operational disruption and cyberattack blurs, especially with SaaS dependencies, leaders must rethink business continuity with a cyber-first lens.
  • Human error remains the wildcard. Despite increased automation, 60% of breaches still involve a human element. Investments in security culture, continuous training and phishing simulations are more essential than ever.

Leading the Future: Collaboration Over Isolation

This year’s DBIR is not just a wake-up call; it’s a roadmap. The future of cybersecurity is about cross-industry collaboration, vendor accountability and smarter, data-informed strategies. Only through shared intelligence, proactive risk management and redefined digital trust can organizations turn this moment of threat into one of transformation.

Is your organization prepared for the evolving threat landscape?

Partner with experts who can help you build resilience, strengthen vendor oversight and protect your future. Contact us today to start developing a smarter, more secure cybersecurity strategy.

Contributors

Gina Gondron, Partner, Frazier & Deeter Advisory, LLC

Kenny Yang, Director

Jessie Sandell, Director

Explore related insights

Explore Insights & Resources