Strengthening the Internet, Protecting People: 2025 Annual Report

Cybersecurity is not optional. It is necessary for an Internet that supports modern economic, social, and civic life. In 2025, cyber threats continued to grow in scale, speed, and sophistication, driven by rapid advances in artificial intelligence, persistent vulnerabilities in core Internet infrastructure, and widening gaps in knowledge of and access to basic cyber protections. At the same time, individuals, nonprofits, small businesses, and governments alike faced increasing pressure to operate securely in digital environments they do not control and often do not understand. These realities reinforced a central truth that has guided the Global Cyber Alliance for a decade: no single actor can secure the Internet alone, and meaningful progress depends on collective, coordinated action.

Throughout the year, GCA focused on reducing cyber risk for people navigating everyday digital life, for mission-driven organizations with limited resources, and for infrastructure operators responsible for systems that underpin global connectivity. We helped people with practical guidance to recognize scams, strengthen their cyber hygiene skills, and build personal resilience. We helped organizations close persistent cybersecurity gaps through targeted education, regional partnerships, and workforce development initiatives. We also continued to advance Internet integrity by improving visibility into the massive volumes of malicious activity that circulate over our networks, by setting up communities of action to address long-standing issues like domain abuse, and by expanding and deepening the impact of MANRS, the global routing security initiative we lead. 

This report highlights how those efforts came together: delivering cybersecurity capacity for Internet users while addressing systemic risk at its source. It explores how GCA responded to AI-enabled threats with education and responsible innovation; how we supported nonprofits and small businesses through hands-on training and community-based programs; how our technical analysis and data platforms exposed state-linked and criminal activity operating across global infrastructure; and how our initiatives are strengthening the foundations of a safer, more resilient Internet. GCA’s work is just beginning. As we enter our second decade, the work described here reflects both continuity and evolution—building on proven approaches while adapting to a rapidly changing threat landscape. Shared responsibility, practical action, and sustained collaboration translate into measurable impact, even as the challenges facing the digital ecosystem continue to grow.