The 2024-2025 period marked a turning point in the cybersecurity landscape. The sustained increase in cyberattacks, along with greater technical sophistication, raised the risk level for public and private organizations worldwide. Accelerated digitalization, cloud dependency, and interconnection among vendors significantly expanded the attack surface.

Next, we analyze the data, incidents, and trends that shaped the cyberattack landscape during this period.

In 2025, organizations faced an unprecedented increase in digital attacks, from AI-powered phishing to supply chain breaches. These incidents not only compromise data and operations but also affect reputation and business continuity, regardless of company size.

More than a 100% increase in cyberattacks against transportation and logistics in recent years, and over 60% of incidents aimed at disrupting the supply chain, confirm a clear reality: the high economic impact and strong technological interconnection of the sector are making logistics operators one of the most attractive and valuable targets for cyberattacks.

In this context, cybersecurity is no longer an isolated technical issue, but a key element to ensure operational continuity. Implementing a comprehensive cybersecurity plan in logistics operators is not just a preventive measure—it is a necessity to protect critical processes and prevent disruptions in the supply chain.

In the retail sector, digital marketing campaigns are a strategic asset. They allow companies to attract customers, build loyalty, and drive sales, but they also involve handling large volumes of personal data: email addresses, phone numbers, ZIP codes, and other information that, in the wrong hands, can pose significant risks.

The legal sector has become one of the most attractive targets for cybercriminals over the past decade. Law firms and legal departments handle extremely sensitive information, from client personal data to litigation strategies and confidential communications, which puts them directly in the crosshairs of cyberattacks.

Protecting this information is a strategic priority, not only to prevent financial losses but also to safeguard reputation and maintain trust in the practice of law.

Startups are born in highly digital environments, with agile infrastructures, small teams, and a strong dependence on technology to grow quickly. This speed is a competitive advantage, but it is also a risk. Cybersecurity is often pushed aside until the first incident occurs. In many cases, that first incident happens sooner than expected and with a greater impact than anticipated.

Cybersecurity has evolved and can no longer rely on reacting only when a problem becomes visible. Threats change daily, and when an attack is detected, the impact has often already occurred and the business has already been affected. For this reason, more and more companies are adopting continuous monitoring and proactive maintenance to detect risks early and protect their systems before an incident occurs.

In 2026, law firms, legal advisory firms, and legal consultancies will face a landscape of more sophisticated threats, increased regulatory pressure, and increasingly intensive use of technology in managing legal matters.

In the logistics sector, product tampering no longer occurs only in warehouses or physical routes. Today, much of the risk originates from IT systems: a compromised IoT sensor, a manipulated TMS, a digitally counterfeited label, or a route deviation caused by a cyberattack can compromise goods without anyone noticing.

Proactive cybersecurity is becoming an essential security measure with the current increase and growing sophistication of cyberattacks. It consists of various actions and security measures that help companies protect themselves. One of these measures is penetration testing, also known as pentesting.

In the logistics sector, every minute counts. A system failure, cyberattack, or infrastructure outage can bring an entire warehouse to a standstill, block transportation routes, or disrupt critical deliveries. In an industry where operations never stop, business continuity no longer depends solely on having backups, but on having a true Disaster Recovery Plan (DRP) capable of restoring business operations within minutes.

When we talk about point-of-sale (POS) systems, we’re referring to the hardware and software that allow card payments to be processed in shops, stores, restaurants, and similar businesses. These systems handle highly sensitive information, such as card data (magnetic stripe or chip), the cardholder’s details, and transaction information. This makes POS systems a very attractive target for cybercriminals.