Critical infrastructure was a core focus, with targeted attacks and new investments in cyber resilience for water systems. Software supply chain risks and advanced credential attacks also dominated, alongside significant breach disclosures and evolving ransomware activity.