HPE Report Reveals Cyberattacks Organized Like Businesses

• •HPE's report covers 1,186 active cyberattack campaigns from 2025.
• •Government organizations were the most targeted sector with 274 campaigns.
• •Attackers increasingly use automation and generative AI for sophisticated attacks.

HPE has published a report detailing 1,186 active cyberattack campaigns observed in 2025, indicating that adversaries are increasingly structuring their operations like large businesses. Government organizations were the most targeted, with 274 campaigns, followed by finance (211) and technology (179). The report highlights the exploitation of long-standing vulnerabilities and the rapid pace at which attackers operate, often outpacing incident response teams. HPE Threat Labs recorded over 147,000 malicious domains and nearly 58,000 malware files, with 549 vulnerabilities actively exploited. The report emphasizes the use of automation in data exfiltration and the role of generative AI in social engineering, particularly through deepfakes. It calls for improved coordination and visibility among defenders to combat these evolving threats.