Attackers target public-facing applications over ransomware in 2025
In late 2025, attackers shifted their focus from high-volume ransomware campaigns to breaking into public-facing applications, according to analysis cited by Telecoms Tech News. Exploiting internet-exposed APIs and web services became the leading way into corporate systems.
The change reflects how digital transformation is erasing the boundary between internal networks and the public internet. As organisations roll out more revenue-generating online services, they unintentionally widen the attack surface. Security teams now have to treat every new external-facing application as a likely entry point, not a side project.
More from Security
Mobile operators are confronting a new security problem: hostile forces can use commercial cellular networks to control and coordinate unmanned aerial
Bharti Airtel and cloud security firm Zscaler are setting up an AI-driven cyber threat research centre in India, aiming to shore up defences for criti
Dutch mobile operator Odido has disclosed a cyberattack that exposed personal data for around 6.2 million people, including its own customers and thos
Dutch operator Odido says a cyberattack exposed personal data tied to more than 6 million customer accounts, making it one of the largest telecoms dat
Enterprises are turning to Private 5G to connect digitised physical infrastructure such as ports, factories, and industrial sites. The draw is clear:
The UK government has launched a £210 million Cyber Action Plan to tighten security around online public services and critical infrastructure. A new c