New Trustwave research on technology sector exposes escalating cyber threats, dark web supply chain attacks, AI-driven risks

 June 26, 2025 – Trustwave, a leading cybersecurity and managed security services provider, has released a series of reports that give an unprecedented look into the evolving threat landscape targeting technology organisations worldwide, revealing how cybercriminals are leveraging both advanced technologies and the dark web to amplify the scale and impact of their attack  The 2025 Trustwave Risk Radar Report: Technology sector is accompanied by two in-depth SpiderLabs research supplements: AI: The double-edged sword of the technology industry and Technology industry deep dive: Dark web-powered supply chain attacks. 
 
Kory Daniels, chief information security officer at Trustwave said, “The technology sector’s relentless pace of innovation is matched only by the creativity and determination of today’s cyber adversaries. Our latest research shows that cybercriminals are not just keeping up—they’re industrialising their operations, exploiting supply chains, and weaponising artificial intelligence (AI). Trustwave is committed to helping technology organisations build resilience through world-class threat intelligence, MDR, and security solutions that address the realities of a hyper-connected digital world.” 
 
The technology industry’s rapid innovation and deep integration across all sectors have made it a prime target for cybercriminals. Trustwave SpiderLabs’ analysis highlights a persistent and highly sophisticated threat environment, with attackers exploiting everything from supply chain vulnerabilities to publicly exposed services and legacy systems. Notably, ransomware groups such as Ransomhub, CLOP, Akira, and Fog have dramatically escalated their campaigns, with the technology sector now experiencing a 10 per cent weekly increase in ransomware activity—accounting for 85 per cent of all targeted attacks globally. 

Trustwave SpiderLabs’ 2025 research series on the technology industry includes:  

• 2025 Trustwave Risk Radar Report: Technology sector 

• Technology sector deep dive: AI: The double-edged sword of the technology 

• Technology sector deep dive: Dark web-powered supply chain attacks 

Key findings from the 2025 risk radar report 

• Ransomware surge: Technology firms face relentless ransomware campaigns, with double extortion tactics and mass data exfiltration targeting software, cloud, and infrastructure providers. 

• Supply chain vulnerabilities: Attacks exploiting third-party dependencies, CI/CD pipelines, and open-source libraries have led to widespread breaches, often originating from a single compromised vendor. 

• Publicly exposed services: Minimal change in exposed technology systems year-over-year, but new vulnerable ports and legacy operating systems continue to provide footholds for attackers. 

• AI-driven threats: Offensive AI is enabling more sophisticated phishing, social engineering, and supply chain attacks, increasing both the scale and success rate of cyber intrusions3. 

• Dark web ecosystem: Cybercriminals are professionalising, collaborating, and monetising access and data from technology sector breaches, driving up the value and frequency of supply chain attacks. 

Actionable recommendations 

Trustwave SpiderLabs urges technology organisations to adopt a proactive, intelligence-driven approach to cybersecurity. Recommendations include: 

• Implementing robust identity and access controls, including multi-factor authentication and least-privilege policies. 

• Conducting regular inventory, assessment, and patching of all systems, especially those exposed to the public internet. 

• Monitoring for dark web leaks and third-party risks with advanced threat intelligence tools. 

• Investing in AI-powered security solutions to detect and counter emerging threats. 

• Strengthening employee awareness and incident response capabilities through regular training and simulation exercise 
   

About Trustwave 

Trustwave is a globally recognised cybersecurity leader that reduces cyber risk and fortifies organisations against disruptive and damaging cyber threats. 

Trustwave’s comprehensive offensive and defensive cybersecurity portfolio detects what others cannot, responds with greater speed and effectiveness, optimises its client’s cyber investment, and improves security resilience. Trusted by thousands of organisations worldwide, Trustwave leverages its world-class team of security consultants, threat hunters, and researchers, and its market-leading security operations platform to decrease the likelihood of attacks and minimise potential impact. 

Trustwave is an analyst-recognised leader in managed detection and response (MDR), managed security services (MSS), cyber advisory, penetration testing, database security, and email security. The elite Trustwave SpiderLabs team provides industry-defining threat research, intelligence, and threat hunting, all of which are infused into Trustwave services and products to fortify cyber resilience in the age of inevitable cyber-attacks. 

For more information about Trustwave, please visit: https://www.trustwave.com/en-us/.