In an increasingly interconnected world, where digital infrastructure underpins mission-critical operations, safeguarding an organisation’s crown jewels has never been more challenging. As cyber threats evolve, so must our defences. Building on my predictions from last year, this blog reflects on our progress in 2024 and looks ahead to the key trends that will shape the cyber security landscape in 2025.
Reflecting on 2024: Lessons and Progress
Last year, we anticipated significant developments in ransomware, supply chain vulnerabilities, deep fake technology, and IoT-based threats. These predictions largely materialised, with AI-driven ransomware attacks becoming alarmingly sophisticated. Automated reconnaissance and exploitation of vulnerabilities exposed critical gaps in many organisations' preparedness.
Meanwhile, the targeting of niche technologies within supply chains intensified, testing our resilience and response strategies. On a more emergent front, AI-generated deep fakes were used to conduct financial fraud, reinforcing the importance of robust verification processes. Operational Technology (OT) and Internet of things (IoT) devices also expanded the attack surface organisations have to manage, presenting unique challenges as attackers bypassed traditional IT boundaries.
Despite these challenges, 2024 saw organisations enhance their incident response capabilities, driven by a shift towards resilience and strengthening regulatory regimes. This foundation equips us to address the new threats we expect in 2025.
Predictions for 2025: Key Trends to Watch
Quantum Computing and Cryptography
As quantum technology progresses, the risk of traditional cryptographic systems being rendered obsolete looms closer. Standards and good practice are rapidly evolving; 2025 will see increased adoption of post-quantum cryptography, as organisations prepare for a future where quantum attacks are a real possibility.
AI-powered Defensive Ecosystems
While adversaries have leveraged AI for offensive purposes, 2025 will witness a counterbalance. AI-driven defensive solutions will emerge, enabling real-time threat detection, analysis, and automated response. AI will also be harnessed to enable security practitioners to communicate impacts clearly and enable engagement with a wider variety of stakeholders improving awareness and cyber literacy.
Supply Chain Collaboration
The interconnected nature of digital supply chains necessitates a collaborative approach to cyber defence. This year will see greater industry-wide sharing of intelligence and development of unified frameworks for managing supply chain and cross sector risks.
Human-centric Security
Human error remains a leading cause of breaches. The focus in 2025 will shift towards fostering a cyber-aware workforce, supported by continuous education and behavior analysis to mitigate insider threats. Creating an environment of trust will foster greater engagement from staff and embedding security throughout projects will avoid controls becoming a blocker to productivity.
IoT and Operational Technology Convergence
Whilst the IT management systems remain the primary weak spot, as IoT and Operational Technology increasingly overlap, attackers will exploit these intersections. Strengthening cross-platform defences will be paramount to protect interconnected systems.
Charting the Path Forward
Looking ahead, organisations must prioritise adaptive resilience, collaborative intelligence, and regulatory alignment to stay ahead of evolving threats. Embedding security by design across operations will ensure that businesses remain agile and robust in the face of uncertainty.
As we navigate 2025, my advice is clear: invest in the future, not just the present. Quantum readiness, AI integration, and a united approach to supply chain security will differentiate the resilient from the vulnerable. Together, we can shape a safer digital future.
Explore further insights into CGI’s expertise in cyber security
About this author
Alex Woodward
Senior Vice President - Consulting Delivery, Cyber Security, CGI in the UK & Australia
Alex leads the delivery of the Security Operations element of CGI’s UK cyber practice with responsibility for Security Operations Advisory, Managed Security Services and Penetration testing functions.
