The cybersecurity landscape is evolving rapidly, driven by new technologies and increasingly sophisticated threats, forcing organizations to reassess their security strategies.
According to Forrester Research,1 78% of surveyed companies experienced a breach in the last 12 months, while 22% said they experienced multiple breaches. Both these numbers are up from the previous year.
The rise of artificial intelligence (AI) and machine learning (ML) is reshaping defense approaches, while the growing threat of ransomware and nation-state actors continues to challenge even the most secure enterprises. These factors underscore the critical importance of cybersecurity in today’s digital world. In 2024, businesses invested heavily in advanced technologies but faced rising risks from attackers leveraging AI to bypass traditional defenses.
And IDC2 found that organizations increased spending on infrastructure for AI deployments by 37% year-over-year in the first half of 2024, reaching $31.8 billion. Additionally, a recent report from Gartner3 found that security spending increased by 13.4% in 2024.
Security solutions are becoming much more advanced and are now an interconnected web of solutions that must anticipate, detect, and respond to evolving threats. Based on the trends that shaped cybersecurity in 2024, here’s what I expect we will start to see in 2025.
AI and ML will be a cybersecurity necessity
By the end of the year, I predict that over half of chief information security officers (CISOs) will incorporate AI and ML into their security software solutions. Many organizations are especially excited about the potential of generative AI to fill gaps in security expertise and strengthen their cyber defenses by identifying patterns, detecting threats, and even predicting future vulnerabilities.
However, it’s important to read behind the label. While certain AI tools are genuinely viable for improving security, many vendors will use the term “AI-enabled” as a marketing tactic. This could lead to confusion in the marketplace, potentially diminishing the credibility of genuinely AI-driven solutions, and companies buying products that don’t live up to their expectations.
Click here to continue reading and discover three more cybersecurity predictions for 2025.
1Forrester Research, “Top Cybersecurity Threats in 2024,” May 2, 2024
2IDC, “Artificial Intelligence Infrastructure Spending to Surpass $200Bn USD Mark in the Next 5 Years,” Feb. 18, 2025
3Gartner, “Gartner Forecasts Global Information Security Spending to Grow 15% in 2025,” Aug. 28, 2024