Thank You!

ChatGPT landed in the collective consciousness in early 2023, bringing prophecies of both supercharged productivity and AI powered cyber security attacks. Now, a few years later the dust has settled somewhat, and the integration of Large Language Model (LLM) based AI tools into every part of our work is well underway.  

The Monthly Threat Report by Hornetsecurity brings you monthly insights into M365 security trends, email-based threats, and commentary on current events in the cybersecurity space. This edition of the Monthly Threat Report focuses on data from the Q2 compared with Q3 of 2025. Industry events mentioned are from the month of September 2025.

Ransomware in 2025 is a paradox. On the one hand, attacks are rising again, fueled by automation, AI-enhanced phishing, and increasingly targeted tactics, especially those targeting multiple endpoints.  

With attackers leaning on automation, exploiting weak patching, and abusing unsecured devices, ransomware has reasserted itself as one of the most disruptive cyber threats facing organizations today. In this article, we review the key takeaways from the Ransomware Impact Report 2025 and why 2026 will mark a significant crossroads for the future of the threat.