NTT Report Reveals Top Five Global Cybersecurity Trends for 2025 and as experts
-
Artificial intelligence, including advanced sophistication of generative AI, to play an increased role in both cyberthreats and cyber defense.
-
International collaboration between nation states and cybercrime groups to raise importance of global cybersecurity collaboration amongst like-minded nations.
-
Supply chain vulnerabilities remain as individuals face new security threats from consumer products.
-
published analysis from its top global cybersecurity executives and experts on five major trends expected to shape the cybersecurity landscape in 2025 and beyond. The full report, “NTT’s Top Five Cybersecurity Trends for 2025,” examines trends along five main categories: Rise in AI-Driven Cyber Threats; Geopolitical Cyber Warfare; Global Cybercrime Collaboration and Expansion; Supply Chain Attack Expansion; and Advancing Consumer Protections.
Key Insights Include:
-
AI driving cybercrime | Mihoko Matsubara, Chief Cybersecurity Strategist, NTT Corporation
In 2025, the world will increasingly face cybercrime driven by AI, generative AI and deepfakes; actors who created ransomware with generative AI were arrested in China in November 2023 and Japan in May 2024. The world will see more ransomware, phishing attacks and business email compromise (BEC). VIPRE Security Group reported in July 2024 that 40% of their detected BEC messages were created by AI.
-
-
To counter growing AI-driven cyber threats, defenders must adopt AI-powered threat detection and response as well as cyber threat intelligence collection and analysis. Vectra AI found in 2023 that U.S. Security Operation Centers use 3.3 billion USD for manual triage. Without AI support, more defenders would suffer stress and burnout, which would only benefit attackers.
To fully take advantage of AI for cyber defense, organizations will have to seek a centralized platform to enable smooth workflow and analysis. Yet, organizations must also be mindful of overdependence on a single vendor and a widespread IT outage similar to the one by CrowdStrike in July 2024.
-
Multinational attacks against like-minded nations | John Petrie, Counselor to the NTT Global CISO
From a nation state perspective, I think the continued cyberattacks by various nations (Russia, China, Iran, North Korea) against the defenses of like-minded nations (Japan, United States, Australia, United Kingdom, etc.) increases.
-
-
In 2025, I believe China may instruct “Typhoon” assets to execute their offensive cyber operations against the west including Japan, United States, Europe, Australia, etc. in support of its strategic response to President Trump’s threat of tariffs.
-
This may disrupt critical infrastructure (specifically IP, telecom, and control networks) where I believe that resiliency and redundancy capabilities will be extremely tested (and, in some areas, fail). The offenders can execute varying degrees of disruptive and potentially critical attacks from internal and external attack vectors.
