as is tradition, I just published my commentary on this year's Verizon Data Breach Investigations Report (aka #DBIR): https://kellyshortridge.com/blog/posts/shortridge-makes-sense-of-verizon-dbir-2025/
In the post, I include the following sections covering what I felt were the most notable insights and facets in the report:
🌍 So, what?
💃 Espionage: fast fashion or couture?
👻 APTs go BWAA-haha >:3
💸 How do the money crimes generate money?
🤖 Attackers are still not really using GenAI
👩🍳 If you can’t make your own 0day, store-bought creds are fine
🔓 #Security was the real supply chain threat all along
🍄 Things Rot Apart
🕵 Scooby Doo's Spooky Kooky Corporate IT Caper
🌈 At least some things are improving somewhere
Go forth and enjoy my commentary, and then make sure to find me at #RSAC to tell me what you loved or hated Tuesday 14:30 at the @fastlydevs booth (where you'll also get a free copy of my book ✨)
thanks @alexcpsec for the early copy <3