Topic starter
10/07/2026 9:13 pm
TL;DR: Recent cyber attacks more than doubled in 2025, while U.S. cybercrime losses reached nearly $21 billion and incidents increasingly targeted trusted tools, OT devices, telecoms, and supply chains, according to Secureframe’s review of recent attacks and cited government and industry reporting. The pattern is clear: resilience now depends on controlling trust relationships, not just defending perimeter entry.
Editorial analysis by NHI Mgmt Group, based on content published by Secureframe: “30 Recent Cyber Attacks & What They Tell Us About the Future of Cybersecurity”.
By the numbers:
- Cyber attacks more than doubled in 2025, according to Secureframe.
- Health-ISAC’s 2025 Fourth Quarter Health Sector Heartbeat reported a 55% year-over-year increase in cyber incidents, according to Secureframe.
- US cybercrime losses hit nearly $21 billion in 2025, a 26% year-over-year increase, according to Secureframe.
Key questions
Q: What breaks when trust relationships are not tightly governed in cyber environments?
A: When trust is not tightly governed, attackers can move through legitimate suppliers, tools, and credentials instead of forcing noisy perimeter intrusion.
Q: Why do trusted tools and supplier access increase cyber risk so quickly?
A: Trusted tools and supplier access increase risk because they often carry broad permissions, implicit confidence, and access to production systems.
Q: What are the signs that supply chain access is becoming risky?
A: Warning signs include credentials present in source control, build systems that reuse long-lived tokens, and deployment paths that can reach production with little separation of duties.
Practitioner guidance
- Inventory external trust relationships Map third-party integrations, support accounts, automation paths, and operational dependencies so you know which trusted connections can reach sensitive systems.
- Reduce standing credential exposure Shorten the lifetime and scope of service account secrets, API keys, and admin credentials used in CI/CD, vendor access, and infrastructure automation.
- Segment operational and critical systems Separate OT, telecom, and production environments from general enterprise access paths and restrict remote administration to tightly governed channels.
Bottom line: The article’s core message is that cyber risk is shifting from perimeter intrusion to abuse of legitimate trust paths across suppliers, tools, and operational systems.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
10/07/2026 9:35 pm
Trust relationships have become the real perimeter. The article’s strongest signal is that attackers are no longer satisfied with breaking in at the edge when they can abuse the access paths organisations already trust. That shifts governance from perimeter defence to trust-path governance across suppliers, automation, and operational dependencies. Practitioners should treat every legitimate relationship as a potential attack corridor.
A question worth separating out:
Q: How should teams respond when OT or telecom systems are part of the attack surface?
A: Teams should separate operational assets from general enterprise access, limit remote administration to tightly governed paths, and assume recovery will be slower than in IT environments. OT and telecom systems need control designs that prioritise exposure reduction, segmentation, and validated containment because downtime constraints make after-the-fact cleanup more difficult.
👉 Read our full editorial: Recent cyber attacks show supply chain trust is now the attack surface