Abstract

The 2025 threat landscape was characterized by an unprecedented acceleration in the weaponization of new security flaws, such as React2Shell, contrasted by the continued exploitation of legacy vulnerabilities like Log4j. Attackers increasingly targeted network infrastructure, specifically identity gateways and management platforms, to bypass MFA and gain network-wide control, while nearly 40% of top-targeted vulnerabilities impacted end-of-life (EOL) devices.