This white paper was created by our partner, HPE.
In this report, HPE Threat Labs reviewed 1186 active threat campaigns globally from January 1 through December 31, 2025. These campaigns demonstrated the ongoing exploitation of both new and known vulnerabilities, employing a wide range of tactics and targeting multiple sectors. Even more alarming than the volume of these campaigns was the professionalism behind the attacks.
Threat actors ran their operations like Fortune 500 enterprises, complete with hierarchical chains of command, specialized teams, rapid coordination, and a nuanced understanding of ubiquitous workforce applications and documents. Virtually no sector was spared. Globally, government agencies were the hardest hit, but financial and technology firms were close behind. The defense, manufacturing, telecommunications, healthcare, and education sectors also faced a significant volume of attacks.