Truesec Releases 2025 Threat Intelligence Report: Cyber Trends and Threats
Truesec today released its 2025 Threat Intelligence Report, highlighting key trends and emerging threats in global and Nordic cybersecurity. The report shows that while cybercrime remains a major risk, proactive cybersecurity investments are helping organizations reduce breaches. Truesec also underscores the importance of staying proactive as cyber threats continue to grow and change.
“Given the current threat landscape and geopolitical situation, cyber risks are a focus for all types of organizations. Our mission is to protect organizations and society from cyber risk. Understanding cyber threats is crucial to deliver relevant solutions to strengthen organizations and the society”, says Anna Averud, CEO Truesec Group.
“The world is constantly changing, and hackers are becoming increasingly sophisticated. Staying ahead with the latest information and insights enables us to ensure the highest level of protection”, says Marcus Murray, founder of Truesec.
Key findings and topics covered in the Threat Intelligence Report:
-
Shifts in cybercriminal tactics. Opportunistic attackers are increasingly targeting smaller businesses (SMEs) with ransomware, moving away from the “big-game-hunting” approach that previously focused on large corporations. Truesec already recognized this trend in last year’s report and has therefore dedicated a section of this year’s report to offer advice and guidance tailored for SMEs.
-
While the threat against SMEs is driven by opportunism, the threat facing larger organizations is that of the silent attacker. What does this entail and what should organizations do to rise to this challenge?
-
How should organizations manage the challenge of supply chain attacks, when the breach isn’t their fault but their problem?
-
The evolution of AI-enhanced cybercrime. Cybercriminals are leveraging artificial intelligence to amplify their efforts. Tools such as large language models (LLMs) and deepfake technology are increasing in usage to enhance phishing attacks, online fraud, and business email compromise (BEC) schemes.
-
The implementation of security controls due to regulations should strive to fulfill the purpose of the regulation, not create endless points of compliance.
-
Geopolitical influence on cyber threats. Truesec’s report highlights the ongoing use of cyber sabotage and hacktivism as tools of hybrid warfare, often disguised as independent activism but driven by state-sponsored actors. North Korean and Iranian cyber-espionage groups are increasingly collaborating with Russian ransomware syndicates to fund their operations.
Read the Threat Intelligence Report 2025: https://www.truesec.com/report2025
