As the festive season unfolds, Bhumit Mali and Aamir Lakhani from Fortinet share an update on the cybersecurity landscape for December 2025.
Every year, the holiday season brings a predictable spike in online activity. But in 2025, the volume of newly created malicious infrastructure, account compromise activity, and targeted exploitation of e-commerce systems is markedly higher. Attackers began preparing months in advance, leveraging industrialised tools and services that enable them to scale attacks across multiple platforms, geographies, and merchant categories.
For retailers, financial institutions, and any business operating an e-commerce infrastructure, the threat landscape has never been more active or more tightly coupled to consumer behaviour. This years surge in online shopping, digital payments, and promotional events creates an environment that threat actors are aggressively exploiting.
