Cybersecurity is an ever-evolving field, adapting to new threats and technologies at a relentless pace. In 2024, we witnessed large-scale cyberattacks that not only disrupted businesses but also had severe implications for public services, such as the attacks on London hospitals and Transport for London. These incidents serve as stark reminders that cyber threats are not just a concern for tech companies – they impact everyone. As business owners, we must educate ourselves on cybersecurity and the potential threats that could materialise in 2025.
As we enter 2025, several key trends are poised to shape the cybersecurity landscape. From the increasing role of artificial intelligence (AI) to vulnerabilities in supply chains and the influence of geopolitical tensions, these issues highlight the importance of proactive cybersecurity measures. Whether you're providing services, developing products, or simply relying on technology in your day-to-day operations, safeguarding your business from cyber threats is non-negotiable.
Although staying ahead of these threats may seem daunting, the first step is awareness. Begin today by reading this blog where we explore the key cybersecurity trends to watch this year. Knowledge is power, and by understanding the trends and taking steps to embed good cyber hygiene practices in your organisation, you can significantly reduce risk.
The Role of AI in Cybersecurity
Artificial intelligence has been a game-changer for businesses, enhancing productivity and automating processes. However, AI's capabilities are also being leveraged by cybercriminals, making it a double-edged sword. In 2025, AI-driven cyberattacks are expected to increase in both sophistication and frequency.
One of the primary concerns is social engineering – where attackers manipulate individuals into divulging sensitive information. This remains one of the most dangerous attack vectors, as evidenced by the fact that 75% of breaches involve malware-free techniques, often driven by social engineering.
AI has facilitated the rise of advanced phishing schemes. For instance, deepfake technology and AI-driven impersonation have already led to substantial financial losses. In one high-profile incident, cybercriminals used AI-generated deepfake calls to impersonate company executives, leading to the theft of €25 million during a compromised Teams meeting in Hong Kong.
Additionally, AI is being integrated into automated ransomware campaigns. By leveraging legitimate tools, cybercriminals can rapidly scale their operations, increasing their chances of success. As businesses adopt more AI-driven solutions internally, attackers are following suit, making AI a central player in the ongoing battle for cybersecurity dominance.
What can businesses do?
- Educate employees on recognising social engineering and phishing attempts.
- Deploy AI-based security solutions to detect and mitigate threats in real time.
- Continuously update and patch software to minimise vulnerabilities exploited by AI-driven attacks.
Securing the Supply Chain
Cybercriminals are increasingly targeting supply chains as a means of maximising their return on investment. By compromising a single vendor, attackers can potentially access numerous clients across various industries, cascading malicious software and wreaking havoc on entire networks.
In 2023, there was a staggering 180% increase in the exploitation of vulnerabilities to initiate cyberattacks. Notably, 15% of these breaches originated from third-party suppliers, such as software vendors or hosting providers.
As third-party breaches rise, organisations must prioritise securing their supply chains. Failing to vet suppliers or ignoring their cybersecurity postures leaves businesses vulnerable to indirect attacks that can bypass their own security measures.
How to mitigate supply chain risks:
- Conduct thorough due diligence when onboarding new vendors or upgrading existing ones.
- Establish stringent security requirements for suppliers and regularly assess their compliance.
- Develop incident response plans that account for supply chain vulnerabilities.
Geopolitics and Cybersecurity
Geopolitical conflicts are increasingly spilling over into the digital realm. Governments worldwide are recognising digital infrastructure as part of their critical national infrastructure, resulting in increased state-sponsored cyber activities.
Countries like Russia and China remain prominent players, often targeting supply chains and engaging in data theft. As geopolitical tensions grow, alliances between nation-states and cybercriminal organisations may strengthen, enabling more sophisticated attacks.
Additionally, hacktivist groups driven by ideological or political motivations are leveraging readily available cyber tools and AI to disrupt services and promote their causes.
Steps to enhance resilience:
- Monitor geopolitical developments that may impact your sector.
- Collaborate with industry peers and government agencies to share intelligence.
- Implement robust network segmentation to limit the spread of attacks.
The Growing Importance of Cyber Insurance
As cyber threats intensify, the financial repercussions of data breaches, ransomware attacks, and operational downtime are becoming more severe. In response, the demand for cyber insurance is set to rise significantly in 2025.
Cyber insurance policies cover a range of costs, including incident response, business interruption, legal fees, regulatory fines, and even ransom payments. By securing appropriate coverage, businesses can mitigate financial losses and ensure quicker recovery following an attack.
Key benefits of cyber insurance:
- Access to professional incident response teams.
- Financial protection against business disruption.
- Coverage for public relations services to manage reputational damage.
Considerations when choosing a policy:
- Ensure the policy covers evolving threats such as ransomware and AI-driven attacks.
- Review coverage limits to align with the size and scope of your business.
- Regularly reassess and update policies to reflect new risks.
Regulatory and Compliance Landscape
Regulations governing cybersecurity are set to tighten in 2025, reinforcing the need for businesses to prioritise risk management. Notably, cybersecurity will become an integral part of broader governance functions, moving away from traditional rules-based approaches towards risk-based strategies.
Key regulatory changes:
NIS2 (Network and Information Security Directive): Rolled out across the EMEA region, NIS2 mandates regular cyber risk assessments, improved incident response planning, and enhanced supply chain security.
DORA (Digital Operational Resilience Act): Focused on the financial sector, DORA aims to oversee ICT risks and ensure the resilience of banking, insurance, and other financial services.
Cyber Resilience Act (CRA): Effective from December 2024, the CRA enforces minimum security standards for all digital products sold within the EU.
UK Cyber Security and Resilience Bill: This post-Brexit initiative will mandate increased incident reporting and empower regulators to act decisively against non-compliance.
How to stay ahead:
Invest in cybersecurity training for staff.
Allocate budgets for compliance and security improvements.
Collaborate with legal and IT teams to ensure regulatory readiness.
Conclusion
The cybersecurity landscape for 2025 presents both challenges and opportunities. By staying informed about emerging trends – from AI-driven threats to supply chain vulnerabilities and evolving regulations – businesses can build more resilient defences.
Cybersecurity is not solely the responsibility of IT teams. It requires a holistic approach involving every employee, supplier, and partner. By fostering a culture of awareness and preparedness, businesses can navigate the complex cyber landscape with confidence and minimise the risks associated with evolving threats.
# Sources:
The Times. “Hong Kong Cyberattack Cost Arup £25m,” The Times, 2024.
https://www.thetimes.co.uk/article/hong-kong-cyberattack-cost-arup-25m-6n3bx5hhw
Google Cloud. “Cybersecurity Forecast 2025,” Google Cloud, 2024.
https://cloud.google.com/blog/topics/threat-intelligence/cybersecurity-forecast-2025
The Guardian. “Hong Kong Company Deepfake Video Conference Call Scam,” The Guardian, 5th February 2024. https://www.theguardian.com/world/2024/feb/05/hong-kong-company-deepfake-video-conference-call-scam
Verizon. “Data Breach Investigations Report,” Verizon, 2024.
https://www.verizon.com/business/resources/reports/dbir/
Computer Weekly. “2025-30: Geopolitical Influence on Cyber and the Convergence of Threat,” Computer Weekly, 2024. https://www.computerweekly.com/opinion/2025-30-Geopolitical-influence-on-cyber-and-the-convergence-of-threat
ExtraHop. “Geopolitics and Cybersecurity Risk in 2024 and Beyond,” ExtraHop, 2024.
https://www.extrahop.com/blog/geopolitics-and-cybersecurity-risk-in-2024-and-beyond
Matheson. “EU Cyber Resilience Act Comes into Force,” Matheson, 2024.
https://www.matheson.com/insights/detail/eu-cyber-resilience-act-comes-into-force
UK Government. “Cyber Security and Resilience Bill,” UK Government, 2024.
https://www.gov.uk/government/collections/cyber-security-and-resilience-bill
