Supply chains, AI, and the cloud: The biggest failures (and one success) of 2025

As we reflect on the pivotal stories of 2024, one incident stands out for its potential to wreak havoc across numerous sectors—a supply-chain attack that nearly plunged countless organizations, including many Fortune 500 companies and governmental bodies, into chaos. The relentless wave of supply-chain attacks continued into 2025, targeting entities both large and small with alarming frequency. For cybercriminals, these attacks represent a lucrative opportunity. By infiltrating a single organization with widespread influence, such as a cloud service provider or developers of widely-used software, they can inadvertently compromise millions of users downstream. This trend persisted in 2025, with a particularly alarming event occurring in December of the previous year that set the stage for this year's cybersecurity landscape. In this case, hackers reportedly reaped around $155,000 from thousands of participants involved with smart contracts on the Solana blockchain. The attack unfolded when cybercriminals embedded a backdoor in a code library utilized by Solana developers. According to the cybersecurity firm Socket, the perpetrators likely gained access to the accounts of Web3.js developers, an open-source library, enabling them to introduce malicious code in a package update. Once developers of decentralized applications on Solana implemented this compromised update, the backdoor proliferated, granting hackers access to individual wallets linked to smart contracts. This breach allowed them to extract private keys, thereby amplifying the impact of their attack. While this incident highlights the dangers of supply-chain vulnerabilities, it is just one of many such attacks that plagued the cybersecurity landscape this year. Numerous other significant breaches also marked 2025, each shedding light on the urgent need for enhanced security measures across all sectors.