EVENTS
EVENTS/DAY
0
EVENTS
0
EVENTS/DAY
0

In the first timeline of January 2025, I collected 109 events (7.27 events/day) with a threat landscape dominated by malware with 18%, down from 33% of the previous timeline, and once again ahead of account takeovers with 17% (it was 20% in the previous timeline), and ransomware with 14%.

In terms of initial access, phishing emails were still the preferred weapon with 12%, down from 20%, ahead of vulnerabilities exploiting public-facing apps (8%) and security appliances (6%).

Cyber crime led the motivations chart with 71%, down from 76% of the previous timeline, as usual ahead of cyber espionage (11% slightly down from 12%), and hacktivism with 4%, slightly down from 5%. Cyber warfare closes the chart with 4 events corresponding to 4%.

Multiple organizations led the sectors chart with 21%, down from 21%, ahead of governments with 17%, up from 10% and individuals, back in the top three with 14%.

Besides these trends, as always the timeline is rich of interesting events, such as mega breaches and attacks against organizations in the fintech space, so my final suggestion does not change: browse the timeline for the details of the events collected in this fortnight.

Feel free to share it to support my work and spread the risk awareness across the community. And last but not least, don’t forget to connect on Linkedin, or even follow @paulsparrows on X (formerly Twitter), psparrows.bsky.social on Bluesky, or @ppasseri@Infosec.exchange on Mastodon for the latest updates.

BE NOTIFIED OF NEW POSTS

SUPPORT MY WORK!
MAKE A DONATION

Creating the timelines is a very time-consuming task.

Any little helps!

POPULAR POSTS
  • October 2026 Cyber Attacks Timeline

    A live view of the month's vetted cyber incidents, updated as new events are confirmed. Explore the timeline, filter by attack type, and see motivations, techniques, initial access methods, targeted sectors and target countries on an interactive map.

  • Maga Breaches 2026 Front ImageMega Breaches in 2026

    Here’s a collection of the main mega breaches (that is data breaches with more than one million records compromised and possibly leaked) during 2026. The information is derived from the cyber attacks timelines that I published, normally, on a bi-weekly basis.

  • September 2026 Cyber Attacks Timeline

    A live, continuously updated timeline of the cyber attacks reported in September 2026 — tracking threat actors, attack techniques, targeted sectors and countries as each incident is vetted and added.

  • September 2026 Cyber Attacks Statistics

    September 2026 recorded 182 cyber incidents, and Cyber Crime drove roughly three in four of them (73.9%). Malware was the top attack vector at 27.8%, exploitation of public-facing applications led initial access at 28.9%, and Information & Communication was the most targeted sector. Explore the ...

  • Rogue AI Agents

    AI agents are escaping sandboxes, misusing credentials and acting without authorization. This live dashboard tracks every reported incident on a horizontal timeline, with charts showing which AI companies and agents are involved, the techniques used and how they got in. It updates automatically as new ...

Maga Breaches 2026 Front Image

Mega Breaches in 2026

Here’s a collection of the main mega breaches (that is data breaches with more than one million records compromised and possibly leaked) during 2026. The information

Continue Reading

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.