Cyberattack landscape shifts toward vulnerability exploits and IoT threats

Recent analyses show a broadening and intensifying cyber‑threat environment. In 2025, global cyber incidents rose 26 % year‑on‑year, with education, telecoms and government sectors now receiving the highest weekly attack volumes. Spain recorded a 16 % increase in weekly attacks, extending beyond finance to administrations, consumer services and manufacturing.

A parallel report from ESET highlights that exploiting unpatched vulnerabilities now accounts for 31 % of attacks, overtaking phishing and credential theft. Only 26 % of critical flaws listed by the U.S. CISA catalogue were patched in 2025, and remediation times have lengthened to an average of 43 days. Artificial‑intelligence tools are accelerating exploit creation, contributing to the rise in ransomware and malware incidents, while 85 % of compromised devices are linked to IoT hardware.