In today’s digital age, achieving cyber resilience is no longer an option—it has become a necessity. Yet, according to the latest report by Splunk, conducted in collaboration with Foundry, a significant cyber confidence gap exists among public sector organizations in this critical area.

The ultralytics supply chain attack occurred in two distinct phases between December 4-7, 2024. In the first phase, two malicious versions were published to PyPI: version 8.3.41 was released on December 4 at 20:51 UTC and remained available for approximately 12 hours until its removal on December 5 at 09:15 UTC. Version 8.3.42 was published shortly after on December 5 at 12:47 UTC and was available for about one hour before removal at 13:47 UTC.

Cyber resilience keeps taking center stage. One of Europe’s compliance regulations, the Digital Operational Resilience Act (DORA), is doubling down on financial organizations. Established in 2022, DORA was created to address critical gaps in EU financial institutions that elevate information and communication technology (ICT) risks. The new rules taking effect meant that businesses were up against the clock to satisfy DORA requirements.

There’s an unfortunate truth about applications and access in the enterprise. Many applications are underutilized. This means patches and updates can fall down the to-do list of already-stretched IT service desks. Naturally, this increases the vulnerabilities – and opportunities for attackers. Risks are compounded when many users retain access they no longer need, especially when it’s access to the most critical and sensitive resources.

As we look ahead to 2025, the cybersecurity landscape is poised for significant shifts and challenges. Here are some key predictions that I believe will take place or start to happen in the coming year.

Healthcare has become more digitized; medical devices play an increasingly vital role in patient care. Alongside these advancements, any medical device connected to the internet can become a vulnerable entry point for cyberthreats. Hospitals and healthcare providers must take proactive steps to protect these devices, ensuring their reliability while safeguarding patient data and network integrity.