Chicago – June 25, 2025 – Trustwave, a leading cybersecurity and managed security services provider, today released a series of reports that give an unprecedented look into the evolving threat landscape targeting technology organizations worldwide, revealing how cybercriminals are leveraging both advanced technologies and the dark web to amplify the scale and impact of their attack. The 2025 Trustwave Risk Radar Report: Technology Sector is accompanied by two in-depth SpiderLabs research supplements: AI: The Double-Edged Sword of the Technology Industry and Technology Industry Deep Dive: Dark Web-Powered Supply Chain Attacks.
“The technology sector’s relentless pace of innovation is matched only by the creativity and determination of today’s cyber adversaries. Our latest research shows that cybercriminals are not just keeping up—they’re industrializing their operations, exploiting supply chains, and weaponizing AI,” said Kory Daniels, CISO at Trustwave. “Trustwave is committed to helping technology organizations build resilience through world-class threat intelligence, MDR, and security solutions that address the realities of a hyper-connected digital world.”
The technology industry’s rapid innovation and deep integration across all sectors have made it a prime target for cybercriminals. Trustwave SpiderLabs’ analysis highlights a persistent and highly sophisticated threat environment, with attackers exploiting everything from supply chain vulnerabilities to publicly exposed services and legacy systems. Notably, ransomware groups such as Ransomhub, CLOP, Akira, and Fog have dramatically escalated their campaigns, with the technology sector now experiencing a 10 percent weekly increase in ransomware activity—accounting for 85 percent of all targeted attacks globally.
Trustwave SpiderLabs’ 2025 research series on the technology industry includes:
Key Findings from the 2025 Risk Radar Report
- Ransomware Surge: Technology firms face relentless ransomware campaigns, with double extortion tactics and mass data exfiltration targeting software, cloud, and infrastructure providers.
- Supply Chain Vulnerabilities: Attacks exploiting third-party dependencies, CI/CD pipelines, and open-source libraries have led to widespread breaches, often originating from a single compromised vendor.
- Publicly Exposed Services: Minimal change in exposed technology systems year-over-year, but new vulnerable ports and legacy operating systems continue to provide footholds for attackers.
- AI-Driven Threats: Offensive AI is enabling more sophisticated phishing, social engineering, and supply chain attacks, increasing both the scale and success rate of cyber intrusions3.
- Dark Web Ecosystem: Cybercriminals are professionalizing, collaborating, and monetizing access and data from technology sector breaches, driving up the value and frequency of supply chain attacks.
Actionable Recommendations
Trustwave SpiderLabs urges technology organizations to adopt a proactive, intelligence-driven approach to cybersecurity. Recommendations include:
- Implementing robust identity and access controls, including multi-factor authentication and least-privilege policies.
- Conducting regular inventory, assessment, and patching of all systems, especially those exposed to the public internet.
- Monitoring for dark web leaks and third-party risks with advanced threat intelligence tools.
- Investing in AI-powered security solutions to detect and counter emerging threats.
- Strengthening employee awareness and incident response capabilities through regular training and simulation exercise.
About Trustwave
Trustwave is a globally recognized cybersecurity leader that reduces cyber risk and fortifies organizations against disruptive and damaging cyber threats.
Trustwave’s comprehensive offensive and defensive cybersecurity portfolio detects what others cannot, responds with greater speed and effectiveness, optimizes its client’s cyber investment, and improves security resilience. Trusted by thousands of organizations worldwide, Trustwave leverages its world-class team of security consultants, threat hunters, and researchers, and its market-leading security operations platform to decrease the likelihood of attacks and minimize potential impact.
Trustwave is an analyst-recognized leader in managed detection and response (MDR), managed security services (MSS), cyber advisory, penetration testing, database security, and email security. The elite Trustwave SpiderLabs team provides industry-defining threat research, intelligence, and threat hunting, all of which are infused into Trustwave services and products to fortify cyber resilience in the age of inevitable cyber-attacks.
For more information about Trustwave, please visit: https://www.trustwave.com/en-us/.
