Introduction
This report contains data, trends and observations from incidents that we responded to throughout 2025. By building on earlier iterations of the CyberCX Threat Report, it allows us to identify and assess threat actor behaviour, their tactics and techniques and how these change over time. With our footprint stretching across Asia, Europe and North America, the insights and analysis reflected in this report are globally derived and relevant.
In the spirit of this mission, we publish this data to provide real-world, practical insights into how malicious actors and their ecosystem change and evolve, introducing new methods and techniques to harm victims and achieve their objectives. As always, this means that defenders must also evolve to stay ahead of the threat.
It is our hope that by lifting the lid on what our frontline incident responders encountered over the past 12 months, we can help organisations and their security teams better prepare for the next 12 months.
Discover
Download the report
CyberCX Digital Forensics and Incident Response team
CyberCX have led the cyber breach response for some of the most sensitive, complex and high-profile incidents in the United Kingdom across the private sector, central and local government.
