Flashpoint 2025 Global Threat Intelligence Report: Stay Ahead of Emerging Threats

Organizations are facing an unprecedented barrage of sophisticated threats that are more complex, interconnected, and higher-stakes than ever before. From the rapid proliferation of information-stealing malware—a gold mine for threat actors—to the exploitation of vulnerabilities, and the rise of ransomware attacks and data breaches, the threat landscape is evolving at a breakneck pace.

The Flashpoint 2025 Global Threat Intelligence Report

The Flashpoint 2025 Global Threat Intelligence Report (GTIR) provides leaders and cybersecurity practitioners—including cyber threat intelligence (CTI), vulnerability management, physical security teams, and CISOs—with the critical data and insights needed to navigate the complexities of the cyber threat landscape. Powered by Flashpoint’s best-in-class collection of over 3.6 petabytes of data sourced from the Internet’s open and hardest-to-reach spaces, this report provides a comprehensive and timely view of the threats that will have the most impact in 2025 and beyond.

Readers will gain:

• A clear understanding of converging threats.
• Insight into the tactics, techniques, and procedures (TTPs) of today’s most prolific threat actors.
• Actionable intelligence to strengthen your security posture.

Flashpoint identified four critical trends shaping the 2025 threat landscape:

1. Compromised Credentials Spiked 33% to 3.2 Billion

Flashpoint found that threat actors compromised over 3.2 billion credentials in 2024, a 33% increase from the year prior. This stolen data dominates illicit marketplaces and is used to fuel a number of illegal campaigns such as ransomware or other types of malware. Examining 2025, over 200 million credentials have already been stolen.

2. Infostealers Continued Their Meteoric Rise as a Primary Threat Vector

Of 2024’s 3.2 billion stolen credentials, 75% or 2.1 billion, were sourced from information-stealing malware, a dangerous new twist on an older threat that has infected over 23 million devices worldwide. The simplicity, effectiveness, vast availability, and low overhead costs of infostealers has propelled them to become a primary vector for ransomware and high-impact data breaches that all organizations should be proactively monitoring for in 2025.

3. Vulnerabilities Grew by over 12%, More than 39% Have Known Exploits

Flashpoint aggregated 37,302 vulnerabilities in 2024 and over 39% of them had publicly available exploit code. Leveraging exploits, threat actors can force their way into exposed systems to gain illegal access. As attack surfaces continue to grow, so too does the number of potential exposures. As a result, it’s more critical than ever for security teams to prioritize based on exploitability, instead of adopting a top-down, or severity-narrowed approach for patching.

4. Ransomware Attacks Increased by 10%, Data Breaches by 6% Across All Sectors

Once access is gained either through compromised credentials, infostealers, or breaches, financially motivated threat actors use stolen credentials and other illegally-obtained information to complete various objectives that put organizations at greater risk, such as moving laterally within systems, installing ransomware, or exfiltrating and selling data.

Flashpoint identified a 10% increase in ransomware attacks across all sectors in 2024, following a tremendous 84% increase from the previous year. In addition, the five most prolific ransomware-as-a-service (RaaS) groups—Lockbit, Ransomhub, Akira, Play, and Qilin—were responsible for over 47% of 2024’s reported attacks. Data breaches saw a year-over-year increase of approximately 6%. All of this highlights the need for organizations to maintain strong defenses and incident response plans.

The Path Forward: Proactive Security in 2025 and Beyond

The data and analysis in the Flashpoint 2025 Global Threat Intelligence Report exposes a hybrid, interconnected cyber threat landscape that demands a proactive and holistic security approach. This extensive collection of data and analysis provides organizations with in-depth insights into the cyber threat landscape, enabling them to make informed security decisions and build a more resilient security posture.

Download the Flashpoint 2025 Global Threat Intelligence Report today to gain the intelligence and expertise necessary to confidently confront cyber risks and safeguard critical assets.