Top 16 Cyber threats 2025

What is social engineering?

• Tricking people into revealing sensitive information (e.g. phishing, spoofing, baiting, whaling).

• Using software to automate attacks.

• Hiding data inside normal internet traffic.

• Malware that locks files until a ransom is paid.

What is third-party exposure?

• Errors such as weak passwords.

• Hackers target less secure partner companies to reach larger businesses.

• Hiding malicious data inside normal internet traffic.

• An employee causing harm intentionally.

What are configuration mistakes?

• Automating attacks using AI.

• Errors such as weak passwords, not updating software, or poorly configured firewalls.

• Hiding data inside internet traffic.

• Malware disguised as safe downloads.

How is AI used in cyberattacks?

• To create realistic phishing scams and find weak spots.

• To lock files until a ransom is paid.

• To disguise malware as safe programmes.

• To hide data inside normal internet traffic.

What is DNS tunnelling?

• Tricking people into revealing information.

• Hiding malicious data inside normal internet traffic so it sneaks past firewalls.

• An employee causing harm intentionally.

• Malware that locks files until a ransom is paid.

What is a drive-by attack?

• Malware that automatically downloads when visiting a compromised site.

• A phishing attack through email.

• A type of ransomware that encrypts files.

• A denial-of-service attack on a server.

What is poor cyber hygiene?

• Using strong passwords and multi-factor authentication.

• Regularly updating software and using secure WiFi.

• Bad habits like weak passwords, no updates, unsafe WiFi, or not using multi-factor authentication.

• Encrypting all sensitive data.

What are cloud vulnerabilities?

• Strong encryption of data in transit.

• Misconfigured or insecure cloud storage that exposes sensitive data.

• Regular backups of cloud data.

• Using multi-factor authentication for cloud access.

Why are mobile devices vulnerable?

• They have built-in firewalls and VPNs.

• They hold personal/banking data but often lack strong security (e.g. firewalls, VPNs).

• They are immune to malware.

• They automatically encrypt all data.

What is the Internet of Things (IoT)?

• A network of traditional computers connected to the internet.

• Everyday smart devices (watches, fridges, cars) connected to the internet — easy targets for hackers.

• A secure network of government devices.

• A system of interconnected servers.