The Rise of Initial Access Brokers and Their Impact on Cybersecurity

The market for Initial Access Brokers (IABs) has expanded significantly over the past two years, facilitating advanced cyber intrusions and enabling both state-sponsored and criminal actors to breach a wider array of targets. According to a report by Check Point, IABs have evolved from peripheral players to critical nodes in the cybercriminal supply chain, allowing sophisticated operations to outsource basic intrusion tasks. This shift has lowered barriers to entry for cybercrime, enabling rapid scaling of campaigns across multiple targets.

UtilityDive

Check Point's findings indicate a growing relationship between geopolitical tensions and nation-state hacking. The report highlights that cyber operations have transitioned from opportunistic disruptions to coordinated campaigns aimed at achieving political and strategic objectives. As nation-states increasingly utilize cyber intrusions as tools of influence, the implications for essential services and national security are profound. The report emphasizes that cybersecurity must now be viewed as a strategic imperative, requiring resilience and rapid recovery capabilities akin to traditional defense planning.

UtilityDiveGlobal cyber attacks hit 2,003 weekly per Organization

In November 2025, organizations worldwide faced an average of 2,003 cyberattacks per week, marking a 3% increase from October and a 4% rise year-over-year. This escalation is attributed to the proliferation of ransomware and emerging risks associated with Generative AI (GenAI). The education sector remains the most targeted, averaging 4,656 weekly attacks per organization, while government institutions and non-profits also experienced significant attack volumes. Ransomware incidents alone saw a 22% year-over-year increase, with North America accounting for 55% of reported cases.

Global cyber attacks hit 2,003 weekly per OrganizationUtilityDive

Critics argue that the current cybersecurity measures are insufficient to combat the sophisticated nature of modern cyber threats. The increasing professionalization of the IAB marketplace and the commoditization of access to critical systems have raised concerns about the ability of organizations to defend against such attacks. The report suggests that traditional cybersecurity strategies may need to be reevaluated to address the evolving landscape of cyber threats effectively.

UtilityDive

Check Point asserts that the rise of IABs and the corresponding increase in cyberattacks necessitate a shift in how policymakers and businesses approach cybersecurity. The organization stresses that identity security, software supply chain protection, and the hardening of operational technology should be prioritized to mitigate risks. “Cybersecurity is no longer just a technical issue; it is a strategic imperative,” Check Point stated, highlighting the need for a comprehensive response to the changing threat environment.

UtilityDive

• “Once considered peripheral players, IABs have become a critical node in the cyber-criminal supply chain, lowering barriers to entry for sophisticated operations and enabling rapid campaign scaling,” — Check Point

UtilityDive

• “Cyber operations have evolved from opportunistic disruptions and intelligence-gathering into deliberate, coordinated campaigns designed to achieve political, economic, and strategic outcomes,” — Check Point

UtilityDive

• “The only effective approach is prevention-first, powered by real-time AI and proactive threat intelligence to block attacks before they cause harm”.” — Omer Dembinsky, Data Research Manager at Check Point Research

Global cyber attacks hit 2,003 weekly per Organization

As the landscape of cyber threats continues to evolve, organizations must adapt their strategies to address the complexities introduced by IABs and the intertwining of cyber operations with geopolitical dynamics. The need for enhanced cybersecurity measures is critical to safeguarding essential services and national security in an increasingly digital world.

UtilityDive