CrowdStrike 2025 Threat Hunting Report Executive Summary

Adversaries Weaponize and Target AI at Scale

Cybercriminals are more dangerous than ever, using AI to bypass defenses, breach trust, and move across domains at machine speed. Traditional security is obsolete.

Based on thousands of real-world intrusions investigated by the CrowdStrike® Falcon Adversary OverWatch™ team, this executive summary delivers actionable intelligence to help protect your organization.

Key insights:

• 320+ companies infiltrated by DPRK-nexus adversaries using GenAI accelerated attacks
• 81% of hands-on-keyboard intrusions were malware-free¹
• 136% surge in cloud intrusions²
• 2x: vishing is on track to double last year's volume³
• 24 hours: how quickly SCATTERED SPIDER moved from account takeover to ransomware deployment

Learn how to stop the world’s most sophisticated adversaries — before they strike.

<sup>1. In the last 12 months
2. In the first half of 2025 compared to all of 2024
3 . By the end of 2025</sup>