Verizon DBIR 2025 Drops, MOVEit Aftermath Spreads, and a Critical Ivanti RCE Gets Actively Exploited

Analysis

Verizon DBIR 2025: Credential Theft and Ransomware Drive Record Breach Counts

The 2025 Data Breach Investigations Report is out and the headline is grim: credential abuse is up again and ransomware now appears in 44% of breaches. If you're not treating password hygiene and MFA as table stakes by now, this report is the wake-up call.

Tools

CISA Vulnrichment Project Adds Structured SSVC Scoring to NVD Gap

CISA's open Vulnrichment repo is quietly filling the gap left by NVD's analysis backlog by adding machine-readable SSVC decision trees to CVE records. For teams doing automated triage, this is worth integrating into your vuln management pipeline right now.