Trends and Challenges in Cybersecurity for 2025-2026
The cybersecurity landscape in 2025 saw significant evolution, with a marked increase in supply chain attacks targeting CI/CD pipelines, open source packages, and developer tooling. Organizations like StepSecurity reported detecting and responding to some of the most consequential supply chain compromises before they became public, highlighting the need for real-time visibility and enforcement across software supply chains. The year also witnessed rapid growth in the adoption of security solutions, as enterprises sought to protect their development environments and open-source repositories from increasingly sophisticated threats.
Simultaneously, the industry experienced major shifts in technology and risk management. Startups drove innovation in browser security, application security for AI-generated code, and SOC automation, reflecting the growing importance of cloud-based workspaces and AI-driven applications. On the risk management front, CISOs faced a tightening cyber insurance market, with insurers demanding more rigorous proof of security controls and warning that major supply chain or AI-related incidents could quickly harden underwriting standards. These developments underscore the need for organizations to adapt their security strategies to address both emerging technical threats and evolving risk management requirements.
Get ahead of threats like this
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
How this story unfolded
4 events from the most recent confirmed update back to the earliest known activity.
StepSecurity expands defenses after 2025 supply chain incidents
In response to the 2025 attacks, StepSecurity expanded its product capabilities with real-time enforcement, secure action replacements, and rapid detection tools, and said it planned broader protections for 2026.
Gartner names 'AI SOC Agents' in its Hype Cycle
In June 2025, Gartner's Hype Cycle identified the category 'AI SOC Agents,' marking a notable recognition point for AI-driven SOC automation offerings.
Google rolls out Manifest V3 browser extensions
In June 2025, Google rolled out Manifest V3 (MV3) extensions, which the commentary says enabled a new control plane for browser observability and enforcement and helped spur emerging browser security startups.
Major software supply chain attacks hit CI/CD and open source ecosystems
During 2025, several major supply chain incidents highlighted growing attacks on developer tooling and pipelines, including the tj-actions/changed-files compromise, Shai Hulud npm package compromises, and the Nx (s1ngularity) compromise.
Related entities
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Sources
3 references tracked. Mallory keeps watching after this page renders.
2025 in Review: The Evolution of Supply Chain Security & What's Next
stepsecurity.io
Open sourceStartup Trends Shaking Up Browsers, SOC Automation, AppSec
darkreading.com
Open sourceCISOs Face A Tighter Insurance Market in 2026
darkreading.com
Open sourceSee the full picture, correlated to your attack surface.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Related stories
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Trends and Challenges in Cybersecurity for 2025-2026
Cybersecurity experts and industry reports highlight evolving threats and persistent challenges as organizations prepare for 2026. Attackers are increasingly exploiting misconfigurations, leveraging AI-driven social engineering, and taking advantage of complex, rapidly changing cloud environments. Despite technological advancements, human error and configuration drift remain leading causes of breaches, with automation and policy enforcement recommended as key mitigations. The financial services sector, while showing improved prevention effectiveness due to regulatory pressure and investment, still faces critical weaknesses at specific attack stages, underscoring the need for continuous validation and adaptive controls. Industry commentary and newsletters reflect on the rapid pace of change, with significant M&A activity, the growing impact of AI on cybersecurity strategies, and ongoing struggles with vulnerability management and software supply chain security. The sector is urged to address these systemic issues by adopting risk-based approaches, improving transparency, and integrating new frameworks such as the OWASP Agentic AI Top 10. As organizations look ahead, the consensus is that while progress is being made, the threat landscape is becoming more sophisticated, requiring ongoing vigilance and innovation.
Mar 21, 2026
Trends and Risks in Enterprise Cybersecurity Approaches for 2026
Organizations are increasingly integrating security into every stage of their operations, moving beyond traditional silos and making cybersecurity a shared responsibility across all business functions. The adoption of DevSecOps practices is accelerating, with security embedded throughout the software development lifecycle to address the growing sophistication of cyberattacks and supply chain threats. Industry reports highlight that embedding security into daily business rhythms and product design leads to better outcomes, while the rise of AI in security operations offers both opportunities for faster detection and risks if foundational practices are weak. At the same time, the attack surface is expanding, with web browsers emerging as a major vector for malware and data exfiltration, particularly through unmanaged browser extensions and the use of generative AI. Reports indicate that browser-based malware now accounts for a significant majority of observed incidents, and privacy-focused extensions have been caught harvesting sensitive user data. These developments underscore the need for continuous risk monitoring, robust vendor management, and a holistic approach to cybersecurity that leverages automation, strong fundamentals, and cross-functional collaboration.
Mar 21, 2026
Escalating Cloud and Supply Chain Security Threats in 2025
The cybersecurity landscape in 2025 is marked by a rapid acceleration in both the frequency and sophistication of cyberattacks, with cloud environments and supply chains emerging as primary targets. According to the Microsoft Digital Defense Report 2025, financially motivated cyberattacks and nation-state operations have intensified, leveraging artificial intelligence to increase the speed, scale, and profitability of attacks. AI-powered phishing campaigns now achieve up to 50 times greater profitability by automating personalized attacks, while the window for compromising cloud containers has shrunk to just 48 hours after deployment. North Korean threat actors have embedded tens of thousands of operatives globally, exploiting the remote workforce as a persistent attack vector. Microsoft telemetry reveals an 87% increase in disruptive campaigns targeting Azure environments, with credential theft and data exfiltration attempts rising by 23% and 58%, respectively. Azure Blob Storage, a critical component for storing unstructured data, is increasingly targeted by threat actors seeking to compromise data integrity and business continuity. Microsoft’s Secure Future Initiative has responded by strengthening default security measures and providing actionable recommendations for defending against these evolving threats, including leveraging Microsoft Defender for Cloud’s Defender for Storage plan. The broader industry is also witnessing a surge in supply chain breaches, with 2025 statistics showing a 68% increase in such incidents, now accounting for 15% of all data breaches. Nearly one-third of all breaches are linked to third-party vendors or partners, and Gartner predicts that 45% of organizations will experience a supply chain breach by the end of 2025. No industry is immune, as interconnected digital ecosystems expand the attack surface and expose organizations to cascading risks from less secure partners. Cloud security incidents are on the rise, with 80% of organizations reporting an increase and 45% of breaches being cloud-based, resulting in an average cost of $4.35 million per breach. Disaster Recovery-as-a-Service (DRaaS) and cyber recovery solutions are increasingly critical for ensuring business continuity and resilience, focusing on restoring clean, uncompromised systems after disruptions. The need for robust security baselines, continuous monitoring, and strategic recovery planning is underscored by the evolving tactics of threat actors and the growing complexity of cloud and supply chain environments. Organizations are urged to adopt a proactive, layered defense strategy, leveraging AI-driven detection, secure configuration, and rapid incident response to mitigate the impact of these accelerating threats. The convergence of cloud and supply chain vulnerabilities demands heightened vigilance, cross-functional collaboration, and investment in advanced security technologies to safeguard critical assets and maintain operational resilience in the face of relentless cyber adversaries.
Mar 21, 2026