With 2025 on the horizon, it's time to reflect on the cybersecurity landscape. We are currently navigating through a rapid transformation, influenced by several factors. Political tensions have intensified, making state-sponsored cyberattacks a global concern, while the growing global digital interdependence amplifies the potential impact of such attacks, turning them into threats that transcend borders.

As 2025 approaches, threats are expected to evolve in intensity and sophistication with increasingly targeted, unpredictable, and hard-to-mitigate attacks. The CrowdStrike incident—a cyber blackout in July that affected millions of devices and disrupted numerous services worldwide—highlighted the urgent need for more robust security strategies.

Techniques such as advanced automation and malware randomisation will increase the complexity of attacks, while AI will enable cybercriminals to personalise large-scale campaigns and exploit vulnerabilities in supply chains and interconnected systems. To address these challenges, organisations should adopt practices like threat-led penetration testing (TLPT) and Red Teaming, which simulate real-world scenarios to identify and address gaps before they can be exploited. These practices, complemented by regular audits, incident simulations, and advanced solutions such as continuous authentication and behavioural monitoring, are vital to safeguarding critical assets and enhancing the readiness of security teams.

Cyber readiness—the ability of organisations to anticipate, detect, and respond effectively to threats—is crucial. Understanding the trends identified by Devoteam Cyber Trust will help companies adopt an integrated approach, combining technology, processes, and people to strengthen resilience, ensure operational continuity, and build trust in an increasingly complex and challenging digital environment.

Access the document here.