Pentests Reveal Top 5 Most Impacted Industries In 2025

15 Aug Pentests Reveal Top 5 Most Impacted Industries In 2025

This week in cybersecurity from the editors at Cybercrime Magazine

Sausalito, Calif. – Aug. 15, 2025

– Download the full report from BreachLock

BreachLock’s 2025 Penetration Testing Intelligence Report, released this week, analyzes over 4,200 pentests conducted over the past 12 months, uncovering the most prevalent and critical vulnerabilities impacting modern organizations.

“The threat landscape isn’t just evolving—it’s accelerating with the rise of vibe coding and agentic solutions,” says BreachLock’s founder and CEO, Seemant Sehgal.

Here are some of the key findings that stand out in this year’s report:

Approximately 40 percent of financial firms have increased penetration testing frequency to quarterly or continuous testing to keep pace with rapid IT changes and evolving threats;

70 percent of vulnerabilities detected in healthcare systems were Medium and High severity issues, largely due to widespread use of legacy systems and inadequate OT security controls;

Technology and SaaS providers are the most impacted industries in 2025, followed by banking and financial services, retail and consumer goods, healthcare, and energy and utilities.

BreachLock’s report was included in the 2025 Verizon DBIR, which reinforced its role as a trusted resource for smarter, more resilient cybersecurity decisions.

Download the Full Report

Cybercrime Magazine is Page ONE for Cybersecurity. Go to any of our sections to read the latest:

• SCAM. The latest schemes, frauds, and social engineering attacks being launched on consumers globally.

• NEWS. Breaking coverage on cyberattacks and data breaches, and the most recent privacy and security stories.

• HACK. Another organization gets hacked every day. We tell you who, what, where, when, and why.

• VC. Cybersecurity venture capital deal flow with the latest investment activity from various sources around the world.

• M&A. Cybersecurity mergers and acquisitions including big tech, pure cyber, product vendors and professional services.

• BLOG. What’s happening at Cybercrime Magazine. Plus the stories that don’t make headlines (but maybe they should).

• PRESS. Cybersecurity industry news and press releases in real time from the editors at Business Wire.

• PODCAST. New episodes daily on the Cybercrime Magazine Podcast feature victims, law enforcement, vendors, and cybersecurity experts.

• RADIO. Tune into WCYB Digital Radio at Cybercrime.Radio, the first and only round-the-clock internet radio station devoted to cybersecurity.

Contact us to send story tips, feedback and suggestions, and for sponsorship opportunities and custom media productions.