网络安全进入高复杂度时代：2025全球风险全景扫描

IncollaborationwithAccenture

GlobalCybersecurityOutlook2025

INSIGHTREPORTJANUARY2025

Images:GettyImages

Contents

Foreword3

Executivesummary4

1Understandingcomplexityincyberspace8

1.1Majordisparitiesanddisruptions9

1.2Thechallengefortheyearahead9

2Decodingcomplexity11

2.1Thecyberthreatlandscape12

2.2SecurityintheIntelligentAge19

2.3Growingecosysteminterdependenciesandrisks23

2.4Thestateofcyberresilience32

3Navigatingcomplexityincyberspace40

3.1Introducingtheeconomicsofcybersecurity40

Conclusion42

Appendix:Methodology43

Contributors44

Acknowledgements44

Endnotes47

GlobalCybersecurityOutlook20252

GlobalCybersecurityOutlook20253

January2025

GlobalCybersecurityOutlook2025

Foreword

Followingdecadesofrelativestability,theworld

todayismarkedbyincreasedgeopoliticalconflicts.Thefalloutofthisturbulenceinthedigitalrealm–thegrowingprowessofcybercriminals,rapid

advancesinemergingtechnologiesandwideningcybercapabilities–haveledtoacyberspacethatismorecomplexthaneverbefore.Againstthis

backdrop,theGlobalCybersecurityOutlookservesasanindispensabletooltohelpleadersnavigatesuchcomplexityandidentifyessentialactionstobuildresilientecosystems.

Lastyear’sreportbroughttotheforetheprevailinginequitybetweenthecyberhavesandhave-

nots.Despiteincreasedexecutiveawarenessofcybersecurityrisks,thecomplexityincyberspaceisfurtherexacerbatingcyberinequityasresilientorganizationspullahead,whileothersstruggle

withlimitedresources.Amidincreasingly

interdependentsupplychains,thiscyberinequity

isresultinginsystemicpointsoffailurewith

significantconsequencesfortheoverallresilienceoftheecosystem.

ThetransformativepotentialofAItechnologies

presentsbothunprecedentedrisksandunmatchedopportunitiesforcybersecurity.Asorganizations

racetoadoptAI,cybercriminalsaremovingat

breakneckspeedtoexploitvulnerabilitieswhileenhancingtheefficacyoftheirmethods.Cyberdefenders,too,areleavingnostoneunturnedinharnessingthepotentialofthesetechnologiestoshiftthebalanceinthisgrowingAIarmsrace.

Lookingtothefuture,thelevelofcomplexityshowsnosignsofabating.Inaborderlesscyberspace,

greatercollaborationbetweenactorsinthepublicandprivatesectorsiscrucialforsafeguarding

thebenefitsofdigitalizationforall.Thisisacalltoaction,andthetimetoactisnow.

GlobalCybersecurityOutlook20254

Executivesummary

Inacomplexcyberspacecharacterizedbygeopoliticaluncertainties,wideningcyberinequityandsophisticatedcyberthreats,

leadersmustadoptasecurity-firstmindset.

Whilethe2024editionofthe

GlobalCybersecurity

Outlook

highlightedthegrowinginequityin

cyberspace,thisyear’sreportshinesalighton

theincreasingcomplexityofthecyberlandscape,whichhasprofoundandfar-reachingimplicationsfororganizationsandnations.

Thiscomplexityisdrivenbyaseriesofcompoundingfactors:

–Escalatinggeopoliticaltensionsarecontributingtoamoreuncertainenvironment.

–Increasedintegrationofanddependenceon

morecomplexsupplychainsisleadingtoa

moreopaqueandunpredictablerisklandscape.

–Therapidadoptionofemergingtechnologiesiscontributingtonewvulnerabilitiesas

cybercriminalsharnessthemeffectivelytoachievegreatersophisticationandscale.

–Simultaneously,theproliferationofregulatory

requirementsaroundtheworldisaddinga

significantcomplianceburdenfororganizations.

Allofthesechallengesareexacerbatedbya

wideningskillsgap,makingitextremelychallengingtomanagecyberriskseffectively.

FIGUREA

Factorscompoundingthecomplexnatureofcybersecurity

s

s

n

o

i

s

n

e

t

l

a

c

i

t

i

l

o

p

o

e

G

s

o

C

p

y

h

b

i

e

s

r

t

c

i

r

c

i

a

m

t

i

e

o

n

i

n

h

c

e

t

d

g

n

a

n

i

I

g

A

r

e

m

e

r

R

e

e

q

u

g

i

r

u

e

l

a

m

t

o

e

r

n

t

y

s

Cyberskillsgap

Complexityincybersecurity

terdependencie

Supplychain

Thegrowingcomplexityofcyberspaceis

exacerbatingcyberinequity,wideningthegap

betweenlargeandsmallorganizations,deepeningthedividebetweendevelopedandemerging

economies,andexpandingsectoraldisparities.1

Some35%ofsmallorganizationsbelievetheir

cyberresilienceisinadequate,aproportionthat

hasincreasedsevenfoldsince2022.Bycontrast,

theshareoflargeorganizationsreportinginsufficientcyberresiliencehasnearlyhalved.

GlobalCybersecurityOutlook20255

Organizationsreportinginsufficientcyberresilience

FIGUREB

Myorganization'scyberresilienceisinsufficient

Smallerorganizationsarestrugglingtoensurecyber

resilience,whilelargerorganizationsshowsteadyprogress

40%

30%

20%

10%

0%

35%

13%

7%

5%

2022

●Small●Large

71%ofcyberleadersat

theAnnualMeetingon

Cybersecurity2024believe

thatsmallorganizationshave

alreadyreachedacritical

tippingpointwheretheycan

nolongeradequatelysecure

themselvesagainstthegrowingcomplexityofcyberrisks

71%

2025

Thisdisparityincyberresilienceisfurther

highlightedbyregionaldifferencesinpreparedness:whileonly15%ofrespondentsinEuropeandNorthAmericalackconfidenceintheircountry’sabilitytorespondtomajorcyberincidentstargetingcritical

infrastructure,thisproportionrisesto36%inAfricaand42%inLatinAmerica.

Thepublicsectorisdisproportionatelyaffected,with38%ofrespondentsreportinginsufficientresilience,comparedtojust10%ofmedium-to-largeprivate-

sectororganizations.Thisinequityextendstothecyberworkforce,with49%ofpublic-sectororganizationsindicatingtheylackthenecessarytalenttomeettheircybersecuritygoals–an

increaseof33%from2024.

TheGlobalCybersecurityOutlook2025reportincludesadeeperanalysisofthemostimportantdriversof

complexityandprovidesvaluableinsightsintothemostpressingcyberchallengesintheyearaheadandtheirpotentialimplicationsforexecutives.

Regionaldifferencesincyberresilience

FIGUREC

Howconfidentareyouthatthecountryinwhichyourorganizationisbasediswellpreparedtorespondtomajorcyberincidentstargetingcriticalinfrastructure?

LatinAmerica

Africa

Asia

MiddleEast

Europe

NorthAmerica

Oceania

-70%-60%-50%-40%-30%-20%-10%0%10%20%30%40%50%60%70%80%

NotconfidentNeutral●ConfidentVeryconfident

40%

42%

40%

48%

36%

36%

31%

36%

37%

35%

50%

27%

27%

20%

21%

25%

25%

14%

15%

15%

17%

15%

13%

4%

9%

9%

7%

GlobalCybersecurityOutlook20256

Thesearethekeyfindingsfromthisyear’sreportandthemaintrendsthatexecutiveswillneedtonavigatein2025:

Supplychainvulnerabilitiesareemergingasthetopecosystemcyberrisk

Oflargeorganizations,54%identifiedsupplychainchallengesasthebiggestbarriertoachievingcyberresilience.Theincreasingcomplexityofsupply

chains,coupledwithalackofvisibilityandoversightintothesecuritylevelsofsuppliers,hasemergedas

theleadingcybersecurityriskfororganizations.Keyconcernsincludesoftwarevulnerabilitiesintroducedbythirdpartiesandpropagationofcyberattacksthroughouttheecosystem.

Geopoliticaltensionsshapecybersecuritystrategy

Nearly60%oforganizationsstatethatgeopoliticaltensionshaveaffectedtheircybersecurity

strategy.Geopoliticalturmoilhasalsoaffectedtheperceptionofrisks,withoneinthreeCEOsciting

cyberespionageandlossofsensitiveinformation/intellectualproperty(IP)theftastheirtopconcern,while45%ofcyberleadersareconcernedaboutdisruptionofoperationsandbusinessprocesses.

FIGURE

D

Theeffectsofgeopoliticaltensionsonorganizations’cybersecuritystrategies

Whichofthefollowingcyberrisksareyoumostconcernedaboutinthecontextofgeopoliticaltensions?

1%

5%

2%

3%

2%

2%

1%

010%20%30%40%50%

●CEO●CISO

Disruptionofoperations

CyberespionageandlossofsensitiveinformationorIP

Financiallossesduetocyberattacks

Damagetobrandreputationandlossofcustomertrust

Increasedcostsfor

cybersecuritymeasuresandincidentresponse

Disinformationcampaigns

Notconcerned

Other

11%

11%

33%

45%

27%

31%

12%

8%

7%

GlobalCybersecurityOutlook20257

RapidadoptionofAIintroducesnewvulnerabilities

While66%oforganizationsexpectAItohavethe

mostsignificantimpactoncybersecurityintheyeartocome,only37%reporthavingprocessesinplacetoassessthesecurityofAItoolsbeforedeployment.

ThisrevealstheparadoxofthegapbetweentherecognitionofAI-drivencybersecurityrisksandtherapidimplementationofAIwithoutthenecessarysecuritysafeguardstoensurecyberresilience.

FIGURE

E

Cybersecurityvulnerabilitiesanticipatedin2025

DoesyourorganizationhaveaprocessinplacetoassessthesecurityofAItoolsbefore

010%20%30%40%50%60%70%

4%

3%

2%

2%

AI/machinelearning

technologies(generativeAI,malicioususeofAI,AI-drivendetectionandresponse)

ConvergenceofITandOTsecurity

Cloudtechnologies

(greateradoptionofcloudsolutions)

Quantumtechnologies

(computing,encryption)

Decentralizedtechnologies(securemulti-party

computation,blockchain)

Satellitetechnologies(communication,

GPS,internet)

Other

Inyourview,whichofthefollowingwillmostsignificantlyaffectcybersecurityinthenext12months?

deployingthem?

●Yes●No

37%

63%

66%

13%

11%

GenerativeAIisaugmentingcybercriminalcapabilities,contributingtoanuptickinsocialengineeringattacks

Some72%ofrespondentsreportanincrease

inorganizationalcyberrisks,withransomware

remainingatopconcern.Nearly47%of

organizationsciteadversarialadvancespoweredbygenerativeAI(GenAI)astheirprimaryconcern,

enablingmoresophisticatedandscalableattacks.In2024therewasasharpincreaseinphishing

andsocialengineeringattacks,with42%oforganizationsreportingsuchincidents.

Regulationsbolstercyberresilience,yettheirfragmentationintroducessignificantcompliancechallenges

Regulationsareincreasinglyseenasanimportantfactorforimprovingbaselinecybersecuritypostureandbuildingtrust.However,theirproliferationanddisharmonyarecreatingsignificantchallenges

fororganizations,withmorethan76%ofchief

informationsecurityofficers(CISOs)atthe

WorldEconomicForum’sAnnualMeetingon

Cybersecurityin2024reportingthatfragmentationofregulationsacrossjurisdictionsgreatlyaffects

theirorganizations’abilitytomaintaincompliance.

Organizationsaregrapplingwithashortageofcriticalcybertalent

Since2024,thecyberskillsgaphasincreased

by8%,withtwooutofthreeorganizations

reportingmoderate-to-criticalskillsgaps,includingalackofessentialtalentandskillstomeettheir

securityrequirements.Furthermore,only14%oforganizationsareconfidentthattheyhavethepeopleandskillstheyneedtoday.

GlobalCybersecurityOutlook20258

1

Understandingcomplexityincyberspace

Ascyberspacebecomesincreasingly

complex,ithasthepotentialtoexacerbatecyberinequityfororganizationsthatare

unabletomeetgrowingchallenges.

GlobalCybersecurityOutlook20259

1.1

ofGCOsurvey

respondentsreportedariseincyberrisks.

1.2

Cybersecurityisenteringaneraofunprecedentedcomplexity.Geopoliticaltensionsareintensifying,newtechnologiesareemergingatbreakneck

speedandthreatsareevolvingintoevermoresophisticatedattackvectors.Atthesametime,

expandingregulatorydemands,vulnerabilities

ininterwovensupplychainsandawidening

cyberskillsgaparecompoundingthechallengesorganizationsfaceinstayingsecure.Thestakeshaveneverbeenhigher.

Majordisparitiesanddisruptions

TheGlobalCybersecurityOutlook2024revealed

significantcyberinequity,exposingstarkdisparitiesinresiliencebetweensmallandlargeorganizations.2TheWorldEconomicForum’sGlobalRisksReport2024foundthatcyberinsecurityisaglobalrisk

overmultipletimehorizons,withcyberrisks

suchasmalware,deepfakesandmisinformation

threateningsupplychains,financialstabilityand

democraticsystems.3Additionally,theChiefRisk

OfficersOutlookfromOctober2024rankedcyberriskamongthetopthreethreatsseverelyaffectingorganizations.4Astriking71%ofchiefriskofficersanticipatedsevereorganizationaldisruptionsduetocyberrisksandcriminalactivity.5

In2024theworldwitnessedthelargestIToutage

inhistory,disruptingairlines,banks,broadcasters,healthcareproviders,retailpaymentsystemsand

ATMsgloballyandcausinganestimated$5billioninlosses.6Thisincidentunderscoredthevulnerabilitiesstemmingfromdependenceonalimitednumber

ofcriticalproviders.Cyberthreatscontinuedto

escalate,with72%ofrespondentstotheGlobal

CybersecurityOutlook(GCO)survey(seeAppendix:

Methodology)reportingariseincyberrisks.The

surveyfurtherrevealedthatcybercrimegrewin

bothfrequencyandsophistication,markedby

ransomwareattacks,AI-enhancedtactics–suchasphishing,vishinganddeepfakes–andanotableincreaseinsupplychainattacks.

Thechallengefortheyearahead

The2025reportfindsthataseriesofcompoundingfactorsaredrivinganescalatingcomplexityinthecyberlandscape:

–Geopoliticaltensionsarecontributingtoamoreuncertainenvironment.

–Increasedintegrationanddependenceonmorecomplexsupplychainsareleadingtoamore

opaqueandunpredictablerisklandscape.

–Therapidadoptionofemergingtechnologiesiscontributingtonewvulnerabilitiesand

newthreats.

Meanwhile,theproliferationofinternational

regulatoryrequirementsaddsanadditional

complianceburdenfororganizations.Allofthesechallengesarecompoundedbyawideningskillsgap,furthercomplicatingtheabilitytomanagecyberriskseffectively.

Together,thesefactorsdriveincreasingcomplexityandunpredictabilityinthecyberlandscape,

whichaffectsorganizationsinmanyways.First,

itdrivesinequitythroughoutthecyberecosystem,underminingresiliencebycreatingadividebetweenthoseorganizationsthathavetheresourcesto

adaptandthosethatdonotandsubsequently

fallbehind.Thisaffectstheresilienceofthe

ecosystem,becausemanylargerandmore

matureorganizationstypicallydependonextensivenetworksofsmaller,oftenless-maturesuppliers,

andanyincidentaffectingthemcouldalsoimpacttheentiresupplychain.Second,itdrivesgreater

demandformorespecialistskillsincybersecurity,furtherexacerbatingtheskillsgap.Keepingup

withtechnologicaladvancesrequiresmorespecificskillsthatareingreaterdemandinthecyber

skillsmarket.Atthesametime,complexityputsincreasingpressureonoftenalreadystretchedcybersecurityteams.

Thesechallengesdemandacomprehensivere-

evaluationofcyberstrategiesattheorganizationalandecosystemleveltoaddressthecomplexitythathasbecomeinherentinthecyberlandscape.7A

broaderunderstandingofcyberriskisnecessarythatgoesbeyondmere“IT”andconsiderscyberfromanoverallbusinessriskperspective.

FIGURE1Factorscompoundingthecomplexnatureofcybersecurity

s

s

n

o

i

s

n

e

t

l

a

c

i

t

i

l

o

p

o

e

G

s

o

C

p

y

h

b

i

e

s

r

t

c

i

r

c

i

a

m

t

i

e

o

n

i

n

h

c

e

t

d

g

n

a

n

i

I

g

A

r

e

m

e

r

R

e

e

q

u

g

i

r

u

e

l

a

m

t

o

e

r

n

t

y

s

Cyberskillsgap

Complexityincybersecurity

terdependencie

Supplychain

Againstabackdropofgrowingcyberthreatsandexpandingattacksurfaces,

networkdefendersaredrowningintheoperationalcomplexityofalegacy

securitymindset.Theystruggletostitchtogetherdozensofdisparatesecuritysolutionsandenforcesecuritypoliciesacrossanenterprise’snetwork,cloud

andendpointenvironments.Asaresult,people–ourmostpreciouscyber

resource–areleftmanuallytriagingalertsfromincreasinglyautomatedattacks.Tostayaheadofadversaries,weneedtoreimaginecybersecurityoperations,leveragethepowerofAIanddepriveattackersofanytechnologicaladvantage.NikeshArora,ChairmanandChiefExecutiveOfficer,PaloAltoNetworks

GlobalCybersecurityOutlook202510

Supplychain

interdependencies

72%ofrespondentssaycyberriskshave

riseninthepastyear,withcyber-enabled

fraudontherise,anincreaseinphishing

andsocialengineeringattacksandidentifytheftbecomingthetoppersonalcyberrisks.

AIand

emergingtech

78%ofleadersfromprivateorganizationsfeelthatcyberandprivacyregulationseffectivelyreduceriskintheirorganization’secosystems.However,two-thirdsofrespondentscitedthecomplexityandproliferationofregulatory

requirementsasachallenge.

Geopoliticaltensions

Cybercrime

sophistication

Geopoliticaltensionsareaninfluenceoncyberstrategyinnearly60%of

organizations,withoneinthreeCEOs

citingcyberespionageandlossof

sensitiveinformation/IPastopconcerns.

With54%oflargeorganizationsciting

third-partyriskmanagementasamajor

challenge,supplychainchallengesremainatopconcernforachievingcyberresilience.

Cyber

skillsgap

Regulatory

requirements

66%ofrespondentsbelievethatAIwill

affectcybersecurityinthenext12months,butonly37%haveprocessesinplaceforsafeAIdeployment.

Thecyberskillsgaphaswidenedsince2024,withtwointhreeorganizations

reportingmoderate-to-criticalskillsgaps.

Only14%oforganizationsareconfidentthattheyhavethepeopleandskillsrequired.

FIGURE2Cybersecurityisbecomingincreasinglycomplex

GlobalCybersecurityOutlook202511

2

Decodingcomplexity

Ascybercriminalsembraceadvancedtools,theevolvingthreatlandscapedemands

innovativestrategiestocombatincreasinglysophisticatedandfar-reachingattacks.

2.1Thecyberthreatlandscape

Theevolutionofcybercrime

Cyber-enabledfraudranksasthesecond-highestorganizationalcyberriskfor2025,viewedby

CEOsasasignificantthreatalongsideransomwareandsupplychaindisruptions.Atthesametime,

identitytheftclimbstothetopoftheagenda,emergingastheprimarypersonalcyberriskforbothCISOsandCEOs.

Ransomwareremainsthetoporganizational

cyberriskyearonyear,with45%ofrespondentsrankingitasatopconcerninthisyear’ssurvey.AccordingtoleadersattheAnnualMeetingonCybersecurity2024,significantinnovationsin

ransomwareattacksshouldbeexpected.Thisiscompoundedbythecontinuedadoptionof

Ransomware-as-a-Service(RaaS),entrenchingthecommoditizationoftheransomwaremodel.8

FIGURE3Organizationalcyberrisksranked–2025

Whichorganizationalcyberriskconcernsyouthemost?

45%

Ransomwareattack

Cyber-enabledfraud

(includingphishing,other

businessemailcompromise,vishing,etc.)

20%

Supplychaindisruption17%

Maliciousinsider

7%

Disinformation

6%

Denialofservice(DoS)anddistributeddenialofservice(DDoS)attacks

6%

0

10%20%30%40%50%

GlobalCybersecurityOutlook202512

GlobalCybersecurityOutlook202513

4

FIGURE

Organizationalcyberrisk–CEOandCISOviews

Whichorganizationalcyberriskconcernsyouthemost?

30%

57%

20%

22%

26%

7%

8%

7%

11%

2%

3%

3%

2%

2%

010%20%30%40%

●CEO●CISO

Ransomwareattack

Supplychaindisruption

Cyber-enabledfraud

(includingphishing,otherbusinessemailcompromise,vishing,etc.)

Maliciousinsider

Disinformation

Other

Denialofservice(DoS)anddistributeddenialofservice(DDoS)attacks

50%60%

5

FIGURE

Changesinviewofpersonalcyberrisk,2024–2025

Whatpersonalcyberriskconcernsyouthemost?

2025

35%9%46%11%

2024

24%20%20%37%

LossofaccesstoutilitiesCompromisedpersonaldataCyberextortionIdentitytheft

GlobalCybersecurityOutlook202514

Therapidadvancementsandincreasingadoptionofdigital

platformsgloballyismatchedbyanequallyevolvingcyberthreat

landscape.Cybercrimetodayisincreasingnotjustinscalebutalsoinsophistication.Asourdigitalfootprintswiden,sodoesthepotential

attacksurfacefornefariousactors.Itisessentialthatweworktogethertoaddressthisgrowingmenace.Theborderlessnatureoftheinternetnecessitatescollaborationacrossvariousjurisdictionallimitationsto

ensurethatthreatactorshavenosafehavenfortheirevilactivities.

IvanJohnE.Uy,SecretaryofInformationandCommunicationsTechnologyofthePhilippines

Cyberattackersareadoptingnewtoolstoincreasetheeffectivenessandscopeoffamiliarformsof

attack,suchasransomwareandbusinessemail

compromise(BEC).GenAItoolsarelowering

thecostofthephishingandsocialengineering

campaignsthatgiveattackersaccessto

organizations.Therefore,whilethecorecharacterofcyberattackshasremainedstable,organizationsmayneedtoplaceadditionalemphasison

protectingthemselvesagainstwell-developedphishingandcyber-fraudcampaigns.

Cybercrime-as-a-Service(CaaS)platforms

continuetobeadominantandrapidlygrowing

businessmodelinthecriminallandscape,allowingindividualsorgroupswithouttechnicalexpertisetoengageinillicitonlineactivitiesbypurchasingthe

necessarytoolsandsupport.9Thismodel,which

isalreadywellestablishedamongcriminalgroups,hasprogressivelybeenadoptedinotherareasof

cybercrime,suchasAI-enhancedphishingattacks.Theseplatformspresentachallenge,astheyremovethebarriersforentryintocybercriminalactivities.

Whileprogresshasbeenmadeindismantling

someoftheplatforms,enforcementeffortsremaininconsistentasCaaSplatformscontinuetothrive.

Theconvergenceofcybercrimeandorganizedcrimegroups

Thesurgeinthevolumeandvalueofcyber-enabledfraudhasattracted“traditionally”violentorganizedcrimegroupsintothecybercrimemarket.The

interactionoforganizedcybercrimewithorganizedviolentcrimegroupsischangingthenatureof

cybercrimeandgreatlyincreasingtheirsocialimpact.

Thisisperhapsmoststarklyshownbythetraffickingofmorethan220,000peopletoforciblyworkinonlinescam-farmsinSouth-EastAsia.10Withsuchfarmsengagingintheharvestingofdata,disinformationandsocialengineeringtonameafewcapabilities,theyareessentiallybecoming“criminalserviceproviders”.11AccordingtotheGlobalAnti-ScamAlliance,scammers

havesiphonedawaymorethan$1trilliongloballyinthepastyear,costingcertaincountrieslossesofmorethan3%oftheirgrossdomesticproduct(GDP).12

Theentryoftraditionalorganizedcrimegroups

intothecybercrimearenachangesthecharacterofthecriminalmarket.Organizedcrimegroups

areaccustomedtocausingphysicalharmandarearguablylessconcernedabouttheriskcreatedbyattackingcriticalsocialservicessuchasmedical

services.13WhenthisculturalchangeispairedwiththescaleprovidedbyCaaSplatforms,therangeoforganizationsthatcouldbetargetedbyattackssuchasransomwarebecomeswider.14

Cybercrimehaspersistentlyevolvedalongsidethethreatlandscape,

anditsreachextendsbeyondfinancialloss,becomingadisruptiveforcethatthreatensoursocieties.Wemustremainvigilantandcollaborate

acrosssectorstosafeguardthefutureofourdigitalworld.Cybercrime’simpactisfar-reaching–itcanhaltoperations,undermineconfidence

andpermeatetoouroperationaltechnologyandcriticalinfrastructure.Intheyearahead,wemustprioritizenotonlydefencebutproactiveandsystemicdisruptionofthesecriminalnetworksaspartofourcollectiveefforttoensurecyberresilienceandprotectourdigitalfuture.

KenXie,Founder,ChairmanoftheBoardandChiefExecutiveOfficer,Fortinet

GlobalCybersecurityOutlook202515

AIasacatalystofcybercrime

harnessingtheefficiencyofAItoautomateand

personalizedeceptivecommunications.Some

42%oforganizationsexperiencedasuccessful

socialengineeringattackinthepastyear,anumberthatcanonlyincreasewithadvancesandthe

maliciousadoptionofAI.

GenAItoolsarereshapingthecybercrime

landscapebyenablingcriminalstorefinetheir

methods,andautomateandpersonalizetheir

techniques.With47%oforganizationscitingtheirtopconcernsurroundingGenAIastheadvanceofadversarialcapabilities,cybercriminalsare

6

FIGURE

CybersecurityissueslinkedtoGenAI

47%

22%

Others

17%

14%

05%10%

WhichcybersecurityissuesrelatedtoGenAIconcernyouthemost?

Advanceof

adversarialcapabilities

(e.g.phishing,malware

development,deepfakes)

Dataleaks

(exposureofpersonaldatathro