Ransomware attacks continued to climb in 2025 as attackers increasingly timed operations around year-end staffing gaps and shifted away from traditional file encryption.

An operational security failure allowed researchers to recover data that the INC ransomware gang stole from a dozen U.S.

Change signals a shift away from legacy monitoring packs toward modern observability and Azure-based monitoring tools.