This report summarizes Deepwatch’s 2025 frontline threat observations, highlighting a shift from broad, opportunistic attacks to highly targeted edge-to-identity campaigns. Adversaries increasingly exploited zero-day vulnerabilities in edge technologies such as VPNs and firewalls to gain upstream access, while using advanced social engineering to bypass human defenses with minimal noise. The report identifies precision, stealth, and identity-focused exploitation as defining characteristics of the threat landscape, reflecting more deliberate and evasive attacker behavior. It underscores the growing need for organizations to strengthen edge security, identity protection, and detection capabilities to counter sophisticated, targeted campaigns.

Join for free to read