6 security trends to be prepared for in 2025

It is the dawn of a new year as we leave 2024 behind and enter 2025. In terms of cybersecurity, we will have a year of reflection while technology continues to develop rapidly. We will also gather around the TV to enjoy (?) murderous game shows with deadly stakes, at least according to the Stephen King novel The Running Man, set in 2025.

So please join us as we explore what 2025 will bring in terms of cybersecurity trends. What will be new? What will stay the same? What will re-emerge? Let us find out, shall we?

1. AI, AI, and AI

Like last year, you cannot make this list without mentioning AI. It is predicted to be incorporated into almost all software in one way or another.

As with last year, AI can be used for good. Such as improved threat detection, authorization models, contextual authentication awareness, and more. Join our Experttalk on February 19th to learn more about our AI efforts within SAP.

It can also be used for more nefarious purposes, which is why we have seen over 200% rise in phishing attempts during 2024 and over 700% rise in credential attacks. This is a worrying trend that will continue to utilize AI for growth.

Another trend related to the use of AI is the abuse of generative AI. So far, this has been used to trick chatbots into saying things they should not, like selling a car for one dollar, but as organizations adopt generative AI, the risks will grow with them.

2. Phishing continues to grow

Another year, another time phishing makes the list. As mentioned above, 2024 saw a rise in phishing by over 200% because of AI assistance, and there are no signs of things slowing down in 2025.

The worrying trend is that phishing attacks target credentials to a larger extent. Digital identities are the new oil for shady characters, as logging in to a system is far easier than hacking it.

Educating your employees and exploring phishing-proof authentication methods and multi-factor authentication is essential. Protecting the organization’s identity fabric will surely be a topic in 2025.

User Authentication Laptop Promo Right Mobile

3. All eyes on the supply-chain

In 2025, who you work with and what services you buy will be in the spotlight. A growing trend among cybercriminals is to target someone further down the chain to sneak into the castle, as Ford experienced in 2024.

EU regulations also demand a solid risk assessment of your supply chain. Both Dora, which goes live in January, and NIS2, which came into effect last October, specifically mention third-party vendors and supply chains in their requirements.

Partnering with local vendors affected by the same regulations as you will make you far more likely to comply with them.

4. Cloud repatriation

Cloud technologies have matured over the years, and so have our views on them. In fact, there is now a growing trend of moving away from the cloud and back to on-premises.

The main reasons for this are a lack of visibility over your cloud landscape, high costs, and security concerns.

Of course, this does not mean everyone will stop using the cloud altogether. Instead, the hybrid model will probably grow. One where the organization is much more aware of what should and should not go to the cloud.

It is still vital to secure your on-premises assets, such as email, and ensure your employees can access those resources securely, even if they are not in the office.

5. Zero trust keeps gaining ground

According to Gartner, zero-trust adoption was a meager 1% in 2023. However, in 2026, it is predicted to be 10%. That is a lot of growth in just two years, undoubtedly driven by regulations like NIS2, which follow the same security principles as zero trust.

Adapting the least privilege philosophy of zero trust to an existing organization could be a challenging task. But there are adaptable solutions that are made to fit with what you already have, and here is an area where you can make use of AI to make your job easier.

6. Self-service for security

Self-service within IT is a tale as old as time but still a relevant one. With all new regulations, zero-trust principles, and the continued rise of remote working and BYOD demands, self-service will be an essential part of 2025, even if the term itself is not new.

Employees' ability to solve their issues independently, instead of burdening the IT department and waiting for them, will make the organization much more effective and secure. If your users can reset passwords themselves (if you are still using those) or request access through a self-service portal, your IT department can focus on complying with the new regulations, and your users can get to work faster.

Of course, there are many trends within IT and cybersecurity; it all depends on where you are in the big puzzle. However, these six trends will most likely affect us all in some way, and it is essential that you are aware of them and have prepared your organization.

If you need help adapting to new regulations or increasing your overall security, you are more than welcome to contact us, and we will help you along the way.