These findings are part of the Kaspersky Security Bulletin series where we review the key cybersecurity trends of the past year.

Windows remains the primary target for cyberattacks. 48% of users on Windows were targeted by different types of threats throughout 2025. For Mac users, this figure stands at 29%.

Web threats

Globally, 27% of users were attacked with web threats – these refer to malware that targets users when they are online. Web threats are not limited to online activity, but ultimately involve the Internet at some stage for inflicted harm. In Latin America, 26% of users were attacked by web threats in 2025, while this share reached 25% in Africa, 21% in Europe and 19% in the Middle East.

On-device threats

33% of users were attacked with on-device threats. These include malware that is spread via removable USB drives, CDs and DVDs, or that initially makes its way onto the computer in non-open form (for example, programs in complex installers, encrypted files, etc.). Africa headed the rating with 41% of users attacked with this type of threat; APAC reached 33%, Middle East – 32%, Latin America – 30%, and Europe 20%.

“The current cyberthreat landscape is defined by increasingly sophisticated attacks on organisations and individuals around the world. One of the most significant revelations made by Kaspersky this year was the resurgence of the Hacking Team after its 2019 rebranding, with its commercial spyware Dante used in the ForumTroll APT campaign, incorporating zero-day exploits in Chrome and Firefox browsers. Vulnerabilities remain the most popular way for attackers to get into corporate networks, followed by using stolen credentials – hence the rise in password stealers and spyware we see this year. Supply chain attacks are also common, including attacks on open-source software. This year the number of such attacks increased significantly, and we even saw the first widespread NPM worm Shai-Hulud,” commented Alexander Liskin, Head of Threat Research at Kaspersky.

“This increasingly complex threat landscape makes implementing robust cybersecurity strategies vital for organisations, as failure to do so can lead to months of downtime in the event of attacks. Individual users should also always use reliable security solutions, otherwise they put not only their data and money at risk, but also those of the organisations where they work.”

The post Kaspersky detected half a million malicious files daily in 2025 appeared first on ProtectionWeb.

To support this effort, the Limpopo ICT Forum, Department of Communications and Digital Technologies (DCDT) and the Council for Scientific and Industrial Research (CSIR) are jointly host a three-day Cybersecurity Awareness Webinar Series under the theme “Your Data, Your Power: Hlayiseka!” The phrase Hlayiseka!, meaning “Be Safe”, is a call to action for all citizens to take ownership of their digital safety. The theme serves as a reminder that personal data is power and protecting it is not only a technical responsibility but also a personal and social one, the CSIR said.

This initiative forms part of Cybersecurity Awareness Month (October), which is celebrated globally to promote safer online practices and to build a culture of digital responsibility. The webinars bring together cybersecurity experts, educators, parents and members of the public to learn and engage on practical ways to stay safe online and safeguard their digital identities.

The Cybersecurity Awareness Webinar Series aims to:

Promote awareness of personal data protection and responsible digital behaviour;

Educate citizens on how to identify and respond to common online threats;

Strengthen child online protection and digital rights awareness; and

Foster collaboration between government, industry, academia and communities to enhance national cyber resilience.

Day three (30 October 2025 from 18:00 – 19:00) will focus on romance scams and online relationship fraud (phishing and catfishing). It will be hosted by Siphokazi Novukuza, Director, Cybersecurity Operations, DCDT. Presenters will include Thuli Mkhwanazi: Senior Cybersecurity Researcher, CSIR; Danielle Badenhorst: Cybersecurity Specialist, CSIR; and Matsebe Phasha, Committee Member, Secretary, Limpopo ICT Forum.

To join, participants can click on this Teams link.

The post Limpopo ICT Forum, DCDT and CSIR hosting three-day Cybersecurity Awareness Webinar appeared first on ProtectionWeb.