Cyber Threat Overview 2025

ANSSI's Cyber Threat Overview 2025 provides a consolidated assessment of major cyber threats affecting France and its partners: increased ransomware and data‑exfiltration incidents (including double/triple extortion), active exploitation of multiple zero‑day and high‑impact vulnerabilities (Ivanti, SharePoint, VMware, mobile), state‑linked espionage and sabotage campaigns targeting critical infrastructure and diplomatic networks, growing abuse of legitimate cloud/RMM/online services and generative AI by attackers, and supply‑chain/cloud compromises. The report highlights sectoral impacts (education, healthcare, telecoms, ministries), evolving attacker TTPs (Clickfix, MFA fatigue, RMM hijacks, infostealers like Lumma), and stresses the need for coordinated detection, rapid patching, supply‑chain resilience, and cross‑agency cooperation.