Global Threat Intelligence Report 2025
January - September 2025
Key Points
- Mimecast has accumulated data from our systems protecting tens of millions of users, provided insights from our intelligence analysts, and added open-source intelligence on the latest threats.
- Explore analysis of threat activity, statistics revealing attack trends, and a series of recommendations for small businesses and large enterprises to protect their employees and mitigate the impact of risky users.
- In the first nine months of 2025, Mimecast processed more than 24 trillion data points for its nearly 43,000 customers, flagging more than 9.13 billion threats during the nine-month period.
This research is articulated periodically into a threat intelligence report so that anyone involved in cybersecurity, even end-users, can stay informed about the latest threats and trends. This report covers January to September 2025.
The data reveals trends, including greater usage of trusted services, the preferred attacks against specific industries, and signs of AI usage among bad actors. To best defend systems, companies need to be aware of what techniques attackers are employing.
In our 2025 Global Threat Intelligence report, Mimecast has collected threat data from across our platform, focusing on the risks posed by business communications, collaboration environments, and workers. Along with insights from our intelligence analysts and open sources, this threat report aims to inform readers of the current global threat landscape.
Download the report to learn about the specific threats from cybercriminals around the world, explore major events that impacted cybersecurity so far in 2025, and get recommendations for how to take action against these threats.