[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"node-by-slug-\u002Fen\u002Finsights\u002Fcybersecurity-trends-2025-the-challenges-that-will-shape-the-future-en":3,"related-content-view":378},["Reactive",4],{"entity":5,"errors":-1},{"__typename":6,"status":7,"metatag":8,"id":203,"path":204,"title":205,"translations":206,"sharedHeaderRefMedia":214,"sharedTeaserTitle":238,"sharedTeaserText":239,"sharedTeaserRefMedia":241,"sharedParagraphs":243,"sharedTaxrefIndustries":341,"sharedTaxrefExpertises":345,"sharedIntroText":349,"sharedCtaLink":216,"sharedDate":351,"sharedAuthor":353},"NodeInsight",true,[9,14,18,22,26,31,35,39,43,47,51,55,59,63,67,70,74,77,80,82,85,88,92,96,100,104,108,112,116,120,124,128,132,136,140,143,146,149,152,155,158,161,164,167,171,175,178,182,186,190,193,197,201],{"tag":10,"attributes":11},"meta",{"name":12,"content":13},"title","Cybersecurity Trends 2025: Key threats & defence strategies",{"tag":10,"attributes":15},{"name":16,"content":17},"description","Discover the top cybersecurity trends of 2025, from AI-driven attacks to quantum threats and IoT security risks and learn how to effectively prepare for them.",{"tag":10,"attributes":19},{"name":20,"content":21},"abstract","Discover the top cybersecurity trends of 2025, from AI-driven attacks to quantum threats and IoT security risks and learn how organisations can effectively prepare.",{"tag":10,"attributes":23},{"name":24,"content":25},"icbm","51.525772, -0.082716",{"tag":27,"attributes":28},"link",{"rel":29,"href":30},"canonical","https:\u002F\u002Fcms.zuehlke.com\u002Fen\u002Finsights\u002Fcybersecurity-trends-2025-the-challenges-that-will-shape-the-future",{"tag":10,"attributes":32},{"name":33,"content":34},"robots","index, follow",{"tag":27,"attributes":36},{"rel":37,"href":38},"shortlink","https:\u002F\u002Fcms.zuehlke.com\u002Fapi\u002Fgraphql",{"tag":27,"attributes":40},{"rel":41,"href":42},"image_src","https:\u002F\u002Fcms.zuehlke.com\u002Fsites\u002Fdefault\u002Ffiles\u002Fstyles\u002Fmax_1300x1300\u002Fpublic\u002Fimages\u002Fcybersecurity-trends-2025.jpg?itok=hbt0Jaoc,https:\u002F\u002Fcms.zuehlke.com\u002Fsites\u002Fdefault\u002Ffiles\u002Fimages\u002Fzuhlke_innovation_social.jpg",{"tag":10,"attributes":44},{"name":45,"content":46},"referrer","unsafe-url",{"tag":10,"attributes":48},{"name":49,"content":50},"rights","Copyright ©2026 | Zühlke Engineering AG | All rights reserved.",{"tag":10,"attributes":52},{"property":53,"content":54},"og:site_name","Zühlke Engineering AG",{"tag":10,"attributes":56},{"property":57,"content":58},"og:type","website",{"tag":10,"attributes":60},{"property":61,"content":62},"og:url","https:\u002F\u002Fwww.zuehlke.com\u002Fen\u002Finsights\u002Fcybersecurity-trends-2025-the-challenges-that-will-shape-the-future",{"tag":10,"attributes":64},{"property":65,"content":66},"og:title","Cybersecurity Trends 2025: Key threats and defence strategies – Zühlke",{"tag":10,"attributes":68},{"property":69,"content":21},"og:description",{"tag":10,"attributes":71},{"property":72,"content":73},"og:image","https:\u002F\u002Fcms.zuehlke.com\u002Fsites\u002Fdefault\u002Ffiles\u002Fstyles\u002Fmax_1300x1300\u002Fpublic\u002Fimages\u002Fcybersecurity-trends-2025.jpg?itok=hbt0Jaoc",{"tag":10,"attributes":75},{"property":72,"content":76},"https:\u002F\u002Fcms.zuehlke.com\u002Fsites\u002Fdefault\u002Ffiles\u002Fimages\u002Fzuhlke_innovation_social.jpg",{"tag":10,"attributes":78},{"property":79,"content":73},"og:image:url",{"tag":10,"attributes":81},{"property":79,"content":76},{"tag":10,"attributes":83},{"property":84,"content":73},"og:image:secure_url",{"tag":10,"attributes":86},{"property":84,"content":87},"https:\u002F\u002Fwww.zuehlke.com\u002Fsites\u002Fdefault\u002Ffiles\u002Fimages\u002Fzuhlke_innovation_social.jpg",{"tag":10,"attributes":89},{"property":90,"content":91},"og:image:alt","image",{"tag":10,"attributes":93},{"property":94,"content":95},"og:updated_time","2025-12-22",{"tag":10,"attributes":97},{"property":98,"content":99},"place:location:longitude","7.438014",{"tag":10,"attributes":101},{"property":102,"content":103},"place:location:latitude","46.947944",{"tag":10,"attributes":105},{"property":106,"content":107},"og:street_address","80 Great Eastern Street",{"tag":10,"attributes":109},{"property":110,"content":111},"og:locality","London",{"tag":10,"attributes":113},{"property":114,"content":115},"og:region","England",{"tag":10,"attributes":117},{"property":118,"content":119},"og:postal_code","EC2A 3JL",{"tag":10,"attributes":121},{"property":122,"content":123},"og:country_name","United Kingdom",{"tag":10,"attributes":125},{"property":126,"content":127},"og:email","london@zuhlke.com",{"tag":10,"attributes":129},{"property":130,"content":131},"og:phone_number","+44 20 7113 5000",{"tag":10,"attributes":133},{"property":134,"content":135},"og:locale","en_CH",{"tag":10,"attributes":137},{"property":138,"content":139},"og:locale:alternate","de_CH",{"tag":10,"attributes":141},{"property":138,"content":142},"de_DE",{"tag":10,"attributes":144},{"property":138,"content":145},"en_DE",{"tag":10,"attributes":147},{"property":138,"content":148},"en_AT",{"tag":10,"attributes":150},{"property":138,"content":151},"de_AT",{"tag":10,"attributes":153},{"property":138,"content":154},"en_HK",{"tag":10,"attributes":156},{"property":138,"content":157},"en_SR",{"tag":10,"attributes":159},{"property":138,"content":160},"en_BG",{"tag":10,"attributes":162},{"property":138,"content":163},"en_SG",{"tag":10,"attributes":165},{"property":138,"content":166},"en_GB",{"tag":10,"attributes":168},{"property":169,"content":170},"article:publisher","https:\u002F\u002Fwww.facebook.com\u002Fzuehlke.group",{"tag":10,"attributes":172},{"property":173,"content":174},"article:published_time","2025-02-14",{"tag":10,"attributes":176},{"property":177,"content":95},"article:modified_time",{"tag":10,"attributes":179},{"name":180,"content":181},"twitter:card","summary_large_image",{"tag":10,"attributes":183},{"name":184,"content":185},"twitter:site","@zuehlke_group",{"tag":10,"attributes":187},{"name":188,"content":189},"twitter:site:id","247189965",{"tag":10,"attributes":191},{"name":192,"content":91},"twitter:image:alt",{"tag":10,"attributes":194},{"name":195,"content":196},"twitter:image","https:\u002F\u002Fcms.zuehlke.com\u002Fsites\u002Fdefault\u002Ffiles\u002Fstyles\u002Fmax_1300x1300\u002Fpublic\u002Fimages\u002Fcybersecurity-trends-2025.jpg?itok=hbt0Jaoc,https:\u002F\u002Fwww.zuehlke.com\u002Fsites\u002Fdefault\u002Ffiles\u002Fimages\u002Fzuhlke_innovation_social.jpg",{"tag":10,"attributes":198},{"name":199,"content":200},"google-site-verification","VEzolc1Vxy1KyRIlIqUSmVS7fqP_3_ZeBqPRby4g2mE",{"tag":202},"script","26325","\u002Fen\u002Finsights\u002Fcybersecurity-trends-2025-the-challenges-that-will-shape-the-future","Cybersecurity trends 2025: The challenges that will shape the future",[207,210],{"path":204,"langcode":208},{"id":209},"en",{"path":211,"langcode":212},"\u002Fde\u002Finsights\u002Fcybersecurity-trends-2025",{"id":213},"de",{"id":215,"sharedMediaLegend":216,"mediaImage":217,"name":237},"171192",null,{"url":218,"width":219,"height":220,"alt":221,"title":216,"size":222,"mime":223,"variations":216,"headerMinimalVariations":224},"https:\u002F\u002Fcms.zuehlke.com\u002Fsites\u002Fdefault\u002Ffiles\u002Fimages\u002Fcybersecurity-trends-2025.jpg",768,432,"\"\"",187946,"image\u002Fjpeg",[225,229,230,233,236],{"name":226,"url":227,"width":228,"height":220},"FOCAL_POINT32_SMALL","https:\u002F\u002Fcms.zuehlke.com\u002Fsites\u002Fdefault\u002Ffiles\u002Fstyles\u002Ffocal_point_3_2_small\u002Fpublic\u002Fimages\u002Fcybersecurity-trends-2025.jpg.webp?itok=z8BxpfOO",649,{"name":226,"url":227,"width":228,"height":220},{"name":231,"url":232,"width":219,"height":220},"FOCAL_POINT169_MEDIUM","https:\u002F\u002Fcms.zuehlke.com\u002Fsites\u002Fdefault\u002Ffiles\u002Fstyles\u002Ffocal_point_16_9_medium\u002Fpublic\u002Fimages\u002Fcybersecurity-trends-2025.jpg.webp?itok=t3Teu6Yo",{"name":234,"url":235,"width":219,"height":220},"FOCAL_POINT169_LARGE","https:\u002F\u002Fcms.zuehlke.com\u002Fsites\u002Fdefault\u002Ffiles\u002Fstyles\u002Ffocal_point_16_9_large\u002Fpublic\u002Fimages\u002Fcybersecurity-trends-2025.jpg.webp?itok=qKiehTOH",{"name":234,"url":235,"width":219,"height":220},"cybersecurity-trends-2025.jpg","Cybersecurity Trends 2025: Key threats and defence strategies",{"processed":240},"\u003Cp>Discover the top cybersecurity trends of 2025, from AI-driven attacks to quantum threats and IoT security risks and learn how organisations can effectively prepare.\u003C\u002Fp>",{"id":215,"sharedMediaLegend":216,"mediaImage":242,"name":237},{"url":218,"width":219,"height":220,"alt":221,"title":216,"size":222,"mime":223,"variations":216},[244,252,279,284,303,308,313],{"__typename":245,"id":246,"ctaLink":216,"pgSharedText":247,"pgSharedTitle":251,"pgSharedCtaLink":216},"ParagraphPgText","28785",{"value":248,"processed":249,"format":250},"\u003Cp>AI is rapidly transforming cybersecurity – not just for the defenders but also for the attackers. Malicious actors are leveraging AI to automate attacks, evade detection, and exploit vulnerabilities with greater speed and sophistication. Deepfake-powered social engineering, AI-generated malware, and automated phishing campaigns are all expected to become more prevalent.\u003C\u002Fp>\u003Cp>According to the \u003Ca href=\"https:\u002F\u002Fwww.weforum.org\u002Fpublications\u002Fglobal-cybersecurity-outlook-2025\u002Fdigest\u002F\" target=\"_blank\">World Economic Forum’s Cybersecurity Outlook 2025\u003C\u002Fa> two-thirds of companies expect AI to have a significant impact on cybersecurity by 2025, but only 37% report having the necessary tools to assess and mitigate related risks. The challenge is even greater for smaller organisations, where 69% lack the safeguards needed to ensure the secure deployment of AI technologies. Additionally, Gartner identifies AI-driven cyberattacks as a top concern, with 80% of executives recognising them as a critical emerging risk. Attackers can use AI to customise malware, enhance penetration testing, and generate highly convincing phishing campaigns, making traditional security measures less effective. &nbsp;\u003C\u002Fp>\u003Ch3>\u003Cspan lang=\"EN-GB\">To mitigate these risks, organisations should:\u003C\u002Fspan>\u003Cspan>&nbsp;\u003C\u002Fspan>\u003C\u002Fh3>\u003Cul>\u003Cli>Integrate \u003Cstrong>AI-enhanced security platforms\u003C\u002Fstrong>, such as \u003Cstrong>XDR\u002FMXDR (Managed Extended Detection and Response)\u003C\u002Fstrong>, to improve automated threat detection.\u003C\u002Fli>\u003Cli>Strengthen \u003Cstrong>SIEM (Security Information and Event Management) systems\u003C\u002Fstrong> for real-time monitoring and response.\u003C\u002Fli>\u003Cli>Provide \u003Cstrong>continuous employee training\u003C\u002Fstrong> on emerging AI-powered threats, including deepfake social engineering and AI-generated phishing tactics. &nbsp;\u003C\u002Fli>\u003C\u002Ful>\u003Cp>More insights on AI’s impact on cybersecurity can be found in our analysis of AI-driven security threats in \u003Ca href=\"\u002Fnode\u002F26021\" data-entity-type=\"node\" data-entity-uuid=\"b75d9698-df8e-485c-9cce-66cbc086a37a\" data-entity-substitution=\"canonical\">What does AI mean in the context of security?\u003C\u002Fa>\u003C\u002Fp>","\u003Cp>AI is rapidly transforming cybersecurity – not just for the defenders but also for the attackers. Malicious actors are leveraging AI to automate attacks, evade detection, and exploit vulnerabilities with greater speed and sophistication. Deepfake-powered social engineering, AI-generated malware, and automated phishing campaigns are all expected to become more prevalent.\u003C\u002Fp>\u003Cp>According to the \u003Ca href=\"https:\u002F\u002Fwww.weforum.org\u002Fpublications\u002Fglobal-cybersecurity-outlook-2025\u002Fdigest\u002F\" target=\"_blank\">World Economic Forum’s Cybersecurity Outlook 2025\u003C\u002Fa> two-thirds of companies expect AI to have a significant impact on cybersecurity by 2025, but only 37% report having the necessary tools to assess and mitigate related risks. The challenge is even greater for smaller organisations, where 69% lack the safeguards needed to ensure the secure deployment of AI technologies. Additionally, Gartner identifies AI-driven cyberattacks as a top concern, with 80% of executives recognising them as a critical emerging risk. Attackers can use AI to customise malware, enhance penetration testing, and generate highly convincing phishing campaigns, making traditional security measures less effective. &nbsp;\u003C\u002Fp>\u003Ch3>\u003Cspan lang=\"EN-GB\">To mitigate these risks, organisations should:\u003C\u002Fspan>\u003Cspan>&nbsp;\u003C\u002Fspan>\u003C\u002Fh3>\u003Cul>\u003Cli>Integrate \u003Cstrong>AI-enhanced security platforms\u003C\u002Fstrong>, such as \u003Cstrong>XDR\u002FMXDR (Managed Extended Detection and Response)\u003C\u002Fstrong>, to improve automated threat detection.\u003C\u002Fli>\u003Cli>Strengthen \u003Cstrong>SIEM (Security Information and Event Management) systems\u003C\u002Fstrong> for real-time monitoring and response.\u003C\u002Fli>\u003Cli>Provide \u003Cstrong>continuous employee training\u003C\u002Fstrong> on emerging AI-powered threats, including deepfake social engineering and AI-generated phishing tactics. &nbsp;\u003C\u002Fli>\u003C\u002Ful>\u003Cp>More insights on AI’s impact on cybersecurity can be found in our analysis of AI-driven security threats in \u003Ca href=\"\u002Fen\u002Finsights\u002Fwhat-does-ai-mean-in-the-context-of-security\" data-entity-type=\"node\" data-entity-uuid=\"b75d9698-df8e-485c-9cce-66cbc086a37a\" data-entity-substitution=\"canonical\" title=\"What does AI mean in the context of security?\">What does AI mean in the context of security?\u003C\u002Fa>\u003C\u002Fp>","full_html","1. AI-driven cyberattacks: An arms race in automation",{"__typename":253,"id":254,"caption":216,"imageRight":7,"pgSharedTitle":255,"pgSharedCtaLink":216,"textMedia":256,"pgSharedText":276},"ParagraphPgTextMedia","28786","2. The quantum threat: Preparing for cryptographic change",{"id":257,"sharedMediaLegend":216,"mediaImage":258,"name":275},"171196",{"url":259,"width":260,"height":261,"alt":221,"title":216,"size":262,"mime":223,"variations":216,"textMediaVariations":263},"https:\u002F\u002Fcms.zuehlke.com\u002Fsites\u002Fdefault\u002Ffiles\u002Fimages\u002Fthe-quantum-threat.jpg",955,764,164211,[264,269,270,271,274],{"name":265,"url":266,"width":267,"height":268},"FIXED_WIDTH_SMALL","https:\u002F\u002Fcms.zuehlke.com\u002Fsites\u002Fdefault\u002Ffiles\u002Fstyles\u002Ffixed_width_small\u002Fpublic\u002Fimages\u002Fthe-quantum-threat.jpg.webp?itok=iMrlpYHM",900,720,{"name":265,"url":266,"width":267,"height":268},{"name":265,"url":266,"width":267,"height":268},{"name":272,"url":273,"width":260,"height":261},"FIXED_WIDTH_MEDIUM","https:\u002F\u002Fcms.zuehlke.com\u002Fsites\u002Fdefault\u002Ffiles\u002Fstyles\u002Ffixed_width_medium\u002Fpublic\u002Fimages\u002Fthe-quantum-threat.jpg.webp?itok=AaNSBP0o",{"name":272,"url":273,"width":260,"height":261},"the-quantum-threat.jpg",{"value":277,"processed":278,"format":250},"\u003Cp>Quantum computing is progressing rapidly, and while no one can predict exactly when it will break current encryption at scale, Gartner forecasts that by 2029, existing cryptographic methods will become obsolete. While only 4% of the respondents in the \u003Ca href=\"https:\u002F\u002Fwww.weforum.org\u002Fpublications\u002Fglobal-cybersecurity-outlook-2025\u002Fdigest\u002F\" target=\"_blank\">World Economic Forum’s Cybersecurity Outlook 2025\u003C\u002Fa> consider quantum technologies as the factor that will “most significantly affect cybersecurity in the next 12 months“, these technologies present a long-term challenge for organisations that rely on secure communications and data protection.\u003C\u002Fp>\u003Cp>A major concern is that encrypted and signed data stolen today could be decrypted and forged in the future once quantum computing reaches the necessary threshold. This makes post-quantum cryptographic readiness an urgent priority.&nbsp;\u003C\u002Fp>\u003Ch3>\u003Cspan lang=\"EN-GB\">To prepare for the quantum threat, organisations should:\u003C\u002Fspan>\u003Cspan>&nbsp;\u003C\u002Fspan>\u003C\u002Fh3>\u003Cul>\u003Cli>Develop a \u003Cstrong>structured migration plan\u003C\u002Fstrong> to transition to quantum-resistant encryption algorithms.\u003C\u002Fli>\u003Cli>Identify and secure \u003Cstrong>critical systems\u003C\u002Fstrong> that will be most affected by quantum decryption.\u003C\u002Fli>\u003Cli>Stay informed on \u003Cstrong>post-quantum cryptography\u003C\u002Fstrong> advancements like \u003Ca href=\"https:\u002F\u002Fcsrc.nist.gov\u002Fpubs\u002Fsp\u002F800\u002F227\u002Fipd\" target=\"_blank\">key-encapsulation mechanisms\u003C\u002Fa> to ensure timely adaptation.\u003C\u002Fli>\u003Cli>Explore industry collaborations for post-quantum security solutions. Zühlke’s recent partnership with InfoSec Global, for example, focuses on helping organisations transition to quantum-safe encryption. More details can be found \u003Ca href=\"\u002Fnode\u002F26167\" data-entity-type=\"node\" data-entity-uuid=\"be2c8a18-f264-45dc-afa0-e00b8d40341f\" data-entity-substitution=\"canonical\">here.\u003C\u002Fa>\u003C\u002Fli>\u003C\u002Ful>\u003Cp>For a deeper dive into the implications of quantum computing, read our blog post on \u003Ca href=\"\u002Fnode\u002F7518\" data-entity-type=\"node\" data-entity-uuid=\"a0ef7bf9-bcc6-4c98-a0fb-3718385498c6\" data-entity-substitution=\"canonical\">Quantum computing and cybersecurity—why it’s time to prepare now.&nbsp;\u003C\u002Fa>\u003C\u002Fp>","\u003Cp>Quantum computing is progressing rapidly, and while no one can predict exactly when it will break current encryption at scale, Gartner forecasts that by 2029, existing cryptographic methods will become obsolete. While only 4% of the respondents in the \u003Ca href=\"https:\u002F\u002Fwww.weforum.org\u002Fpublications\u002Fglobal-cybersecurity-outlook-2025\u002Fdigest\u002F\" target=\"_blank\">World Economic Forum’s Cybersecurity Outlook 2025\u003C\u002Fa> consider quantum technologies as the factor that will “most significantly affect cybersecurity in the next 12 months“, these technologies present a long-term challenge for organisations that rely on secure communications and data protection.\u003C\u002Fp>\u003Cp>A major concern is that encrypted and signed data stolen today could be decrypted and forged in the future once quantum computing reaches the necessary threshold. This makes post-quantum cryptographic readiness an urgent priority.&nbsp;\u003C\u002Fp>\u003Ch3>\u003Cspan lang=\"EN-GB\">To prepare for the quantum threat, organisations should:\u003C\u002Fspan>\u003Cspan>&nbsp;\u003C\u002Fspan>\u003C\u002Fh3>\u003Cul>\u003Cli>Develop a \u003Cstrong>structured migration plan\u003C\u002Fstrong> to transition to quantum-resistant encryption algorithms.\u003C\u002Fli>\u003Cli>Identify and secure \u003Cstrong>critical systems\u003C\u002Fstrong> that will be most affected by quantum decryption.\u003C\u002Fli>\u003Cli>Stay informed on \u003Cstrong>post-quantum cryptography\u003C\u002Fstrong> advancements like \u003Ca href=\"https:\u002F\u002Fcsrc.nist.gov\u002Fpubs\u002Fsp\u002F800\u002F227\u002Fipd\" target=\"_blank\">key-encapsulation mechanisms\u003C\u002Fa> to ensure timely adaptation.\u003C\u002Fli>\u003Cli>Explore industry collaborations for post-quantum security solutions. Zühlke’s recent partnership with InfoSec Global, for example, focuses on helping organisations transition to quantum-safe encryption. More details can be found \u003Ca href=\"\u002Fen\u002Fabout-us\u002Fnews\u002Fpost-quantum-cybersecurity-new-partnership-with-infosec-global\" data-entity-type=\"node\" data-entity-uuid=\"be2c8a18-f264-45dc-afa0-e00b8d40341f\" data-entity-substitution=\"canonical\" title=\"Post-quantum cybersecurity: new partnership with InfoSec Global\">here.\u003C\u002Fa>\u003C\u002Fli>\u003C\u002Ful>\u003Cp>For a deeper dive into the implications of quantum computing, read our blog post on \u003Ca href=\"\u002Fen\u002Finsights\u002Fquantum-computing-and-cybersecurity-why-its-time-to-prepare-now\" data-entity-type=\"node\" data-entity-uuid=\"a0ef7bf9-bcc6-4c98-a0fb-3718385498c6\" data-entity-substitution=\"canonical\" title=\"Quantum computing and cybersecurity: why it’s time to prepare now?\">Quantum computing and cybersecurity—why it’s time to prepare now.&nbsp;\u003C\u002Fa>\u003C\u002Fp>",{"__typename":245,"id":280,"ctaLink":216,"pgSharedText":281,"pgSharedTitle":283,"pgSharedCtaLink":216},"28788",{"value":282,"processed":282,"format":250},"\u003Cp>As organisations deploy more connected devices across industries – from smart factories and energy grids to autonomous vehicles and healthcare systems – the cybersecurity risks associated with IoT continue to grow. Each connected device represents a potential entry point for attackers, making IoT security a critical priority.\u003C\u002Fp>\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.zscaler.com\u002Fcampaign\u002Fthreatlabz-mobile-iot-ot-report\" target=\"_blank\">The Zscaler ThreatLabz 2024 Mobile, IoT, and OT Threat Report\u003C\u002Fa> observed a 45% increase in IoT malware attacks from June 2023 to May 2024. According to Gartner, cybersecurity will be one of the top investment priorities for CIOs in 2025, with IoT security receiving a significant share of funding growth. This is understandable, as the existing security structures are often not sufficient to comprehensively protect the complexity of IoT ecosystems.&nbsp;\u003C\u002Fp>\u003Ch3>\u003Cspan lang=\"EN-GB\">To address this challenge, organisations should:\u003C\u002Fspan>\u003Cspan>&nbsp;\u003C\u002Fspan>\u003C\u002Fh3>\u003Cul>\u003Cli>Integrate \u003Cstrong>security by design\u003C\u002Fstrong> into product development by embedding robust security measures at every stage, ensuring vulnerabilities are addressed before deployment.\u003C\u002Fli>\u003Cli>Ensure compliance with \u003Cstrong>regulatory frameworks\u003C\u002Fstrong> by regularly updating security protocols to meet evolving industry standards and legislative requirements.\u003C\u002Fli>\u003Cli>Implement \u003Cstrong>continuous device monitoring and attestation\u003C\u002Fstrong>, leveraging external expertise where necessary, to ensure that security risks are identified and mitigated in real time.\u003C\u002Fli>\u003Cli>Collaborate with third-party security specialists to gain insights into emerging threats and best practices for safeguarding IoT infrastructures.&nbsp;\u003C\u002Fli>\u003C\u002Ful>","3. The expanding IoT attack surface",{"__typename":253,"id":285,"caption":216,"imageRight":216,"pgSharedTitle":286,"pgSharedCtaLink":216,"textMedia":287,"pgSharedText":301},"28789","4. Regulatory complexity: Navigating an evolving landscape",{"id":288,"sharedMediaLegend":216,"mediaImage":289,"name":300},"171197",{"url":290,"width":260,"height":261,"alt":221,"title":216,"size":291,"mime":223,"variations":216,"textMediaVariations":292},"https:\u002F\u002Fcms.zuehlke.com\u002Fsites\u002Fdefault\u002Ffiles\u002Fimages\u002Fregulatory-complexity.jpg",66313,[293,295,296,297,299],{"name":265,"url":294,"width":267,"height":268},"https:\u002F\u002Fcms.zuehlke.com\u002Fsites\u002Fdefault\u002Ffiles\u002Fstyles\u002Ffixed_width_small\u002Fpublic\u002Fimages\u002Fregulatory-complexity.jpg.webp?itok=hh192gZd",{"name":265,"url":294,"width":267,"height":268},{"name":265,"url":294,"width":267,"height":268},{"name":272,"url":298,"width":260,"height":261},"https:\u002F\u002Fcms.zuehlke.com\u002Fsites\u002Fdefault\u002Ffiles\u002Fstyles\u002Ffixed_width_medium\u002Fpublic\u002Fimages\u002Fregulatory-complexity.jpg.webp?itok=E9xdscZI",{"name":272,"url":298,"width":260,"height":261},"regulatory-complexity.jpg",{"value":302,"processed":302,"format":250},"\u003Cp>The regulatory environment for cybersecurity is becoming increasingly complex, with stringent measures such as \u003Ca href=\"https:\u002F\u002Fwww.zuehlke.com\u002Fen\u002Finsights\u002Fcyber-resilience-act-how-the-eu-security-regulation-affects-business\" target=\"_blank\">\u003Cstrong>GDPR, the Cyber Resilience Act (CRA), DORA, and NIS-2\u003C\u002Fstrong>\u003C\u002Fa> introducing stricter compliance requirements. While these regulations aim to enhance security standards, multinational organisations face significant challenges due to inconsistencies across different jurisdictions. No wonder Gartner notes that aligning Cyber GRC (Governance, Risk, and Compliance) with overall risk management strategies remains a key challenge.\u003C\u002Fp>\u003Cp>Adapting to these evolving frameworks requires businesses to not only monitor regulatory changes closely but also integrate compliance considerations into their broader cybersecurity strategy. Failure to do so could result in increased financial burdens, operational inefficiencies, and heightened security risks.&nbsp;\u003C\u002Fp>\u003Ch3>\u003Cspan lang=\"EN-GB\">To navigate the evolving regulatory landscape, organisations should:\u003C\u002Fspan>\u003Cspan>&nbsp;\u003C\u002Fspan>\u003C\u002Fh3>\u003Cul>\u003Cli>Track \u003Cstrong>regulatory changes\u003C\u002Fstrong> proactively to ensure compliance with evolving laws.\u003C\u002Fli>\u003Cli>Align \u003Cstrong>Cyber GRC (Governance, Risk, and Compliance)\u003C\u002Fstrong> strategies with overall risk management.\u003C\u002Fli>\u003Cli>Strengthen \u003Cstrong>supply chain security measures\u003C\u002Fstrong> to mitigate compliance risks across vendors and partners.\u003C\u002Fli>\u003C\u002Ful>",{"__typename":245,"id":304,"ctaLink":216,"pgSharedText":305,"pgSharedTitle":307,"pgSharedCtaLink":216},"28790",{"value":306,"processed":306,"format":250},"\u003Cp>The growing reliance on a small number of dominant technology providers for critical infrastructure, cybersecurity solutions, and cloud services poses systemic risks. This concentration of power can result in economic dependencies, reduced competition, and significant vulnerabilities if these providers experience failures or disruptions. &nbsp;\u003C\u002Fp>\u003Cp>Particularly in Europe, where technological self-sufficiency lags behind leading regions, organisations must consider the implications of geopolitical tensions, regulatory shifts, and market imbalances. In their \u003Ca href=\"https:\u002F\u002Fwww.enisa.europa.eu\u002Fpublications\u002Fforesight-cybersecurity-threats-for-2030-update-2024-executive-summary\" target=\"_blank\">Foresight Cybersecurity Threats For 2030 report\u003C\u002Fa>, the European Union Agency for Cybersecurity (ENISA) rates “supply chain compromise of software dependencies” as the biggest threat to organisations with the greatest potential impact and the greatest likelihood of occurrence. &nbsp;\u003C\u002Fp>\u003Cp>A lack of diversification in technology supply chains poses significant risks, including monopolistic pricing, constrained innovation, and heightened exposure to cyber threats. The growing reliance on a small number of dominant providers for critical infrastructure, cybersecurity solutions, and cloud services further exacerbates these challenges, introducing systemic vulnerabilities. Overdependence on a few key players not only limits diversification options but also increases the risk of economic exploitation and leaves organisations exposed to disruptions caused by geopolitical instability. Gartner warns that this trend poses long-term economic and security risks, particularly as Europe remains heavily reliant on foreign technology providers.&nbsp;\u003C\u002Fp>\u003Ch3>\u003Cspan lang=\"EN-GB\">To mitigate vendor lock-in risks, organisations should:\u003C\u002Fspan>\u003Cspan>&nbsp;\u003C\u002Fspan>\u003C\u002Fh3>\u003Cul>\u003Cli>\u003Cspan>Adopt a \u003Cstrong>diversification strategy\u003C\u002Fstrong> to avoid over-reliance on a single technology provider, ensuring greater resilience against systemic failures.\u003C\u002Fspan>\u003C\u002Fli>\u003Cli>\u003Cspan>Invest in \u003Cstrong>open-source solutions\u003C\u002Fstrong> to enhance transparency, control, and reduce dependency on proprietary technology.\u003C\u002Fspan>\u003C\u002Fli>\u003Cli>\u003Cspan>Strengthen \u003Cstrong>local innovation ecosystems\u003C\u002Fstrong> by fostering partnerships with regional suppliers and leveraging government incentives to support homegrown cybersecurity advancements.\u003C\u002Fspan>\u003C\u002Fli>\u003Cli>\u003Cspan>Encourage \u003Cstrong>competition and supplier diversity\u003C\u002Fstrong> by promoting interoperability and supporting standards that facilitate a more balanced technology landscape.&nbsp;\u003C\u002Fspan>\u003C\u002Fli>\u003C\u002Ful>","5. The growing dependency trap: The risks of vendor lock-in",{"__typename":245,"id":309,"ctaLink":216,"pgSharedText":310,"pgSharedTitle":312,"pgSharedCtaLink":216},"28791",{"value":311,"processed":311,"format":250},"\u003Cp>Cybersecurity in 2025 will demand a shift from reactive defence to proactive resilience. As threats grow more sophisticated and attack surfaces expand, organisations must adopt a comprehensive approach that integrates advanced threat intelligence, automation, and collaboration across industries. The key priorities for organisations include:\u003C\u002Fp>\u003Cul>\u003Cli>Strengthen AI-driven security operations to counter emerging threats.\u003C\u002Fli>\u003Cli>Transition towards post-quantum cryptographic readiness before vulnerabilities arise.\u003C\u002Fli>\u003Cli>Embed security in IoT design to mitigate risks in connected environments.\u003C\u002Fli>\u003Cli>Stay compliant with evolving regulations and adapt to new compliance requirements.\u003C\u002Fli>\u003Cli>Reduce supply chain dependency risks by diversifying vendors and technology stacks.&nbsp;\u003C\u002Fli>\u003C\u002Ful>\u003Cp>As cyber threats become more sophisticated and regulatory landscapes evolve, organisations must take a strategic, long-term approach to cybersecurity.\u003C\u002Fp>\u003Cp>For further discussion on how your organisation can prepare for these challenges, feel free to reach out.&nbsp;\u003C\u002Fp>","Future-proofing cybersecurity: Key takeaways",{"__typename":314,"id":315,"title":316,"text":317,"pgCtaLink":318,"imageLayout":321,"media":322},"ParagraphPgTeaserBig","28885","Master the CRA – With our Academy course","The CRA and other regulations are creating massive challenges for businesses. Discover our Academy course and learn how to manage the upcoming challenges.",{"title":319,"url":320,"internal":7},"Learn more","\u002Fen\u002Facademy\u002Fthe-eu-cyber-resilience-act-cra-everything-decision-makers-need-to-know","right",{"id":323,"sharedMediaLegend":216,"mediaImage":324,"name":340},"170210",{"url":325,"width":326,"height":267,"alt":221,"title":216,"size":327,"mime":223,"variations":216,"teaserVariations":328},"https:\u002F\u002Fcms.zuehlke.com\u002Fsites\u002Fdefault\u002Ffiles\u002Fimages\u002Fpromotion_header_cyber-resilience-act.jpg",1600,121192,[329,333,334,338,339],{"name":226,"url":330,"width":331,"height":332},"https:\u002F\u002Fcms.zuehlke.com\u002Fsites\u002Fdefault\u002Ffiles\u002Fstyles\u002Ffocal_point_3_2_small\u002Fpublic\u002Fimages\u002Fpromotion_header_cyber-resilience-act.jpg.webp?itok=HTjJ9qQw",800,533,{"name":226,"url":330,"width":331,"height":332},{"name":335,"url":336,"width":337,"height":267},"FOCAL_POINT54_MEDIUM","https:\u002F\u002Fcms.zuehlke.com\u002Fsites\u002Fdefault\u002Ffiles\u002Fstyles\u002Ffocal_point_5_4_medium\u002Fpublic\u002Fimages\u002Fpromotion_header_cyber-resilience-act.jpg.webp?itok=wOBQLSgV",1125,{"name":335,"url":336,"width":337,"height":267},{"name":335,"url":336,"width":337,"height":267},"promotion_header_cyber-resilience-act.jpg",[342],{"id":343,"name":344},"855","All industries",[346],{"id":347,"name":348},"125","Cybersecurity",{"processed":350},"\u003Cp>The year 2025 marks another step in the ongoing evolution of cybersecurity. As organisations continue their digital transformation, cyber threats are evolving in parallel. This article explores five critical cybersecurity challenges I expect to emerge in 2025 and outlines measures organisations can take to strengthen their security.&nbsp;\u003C\u002Fp>",{"timestamp":352},1739880000,[354],{"status":7,"contactName":355,"contactProfession":356,"contactLinkedinUrl":357,"sharedEmail":361,"sharedRefMedia":362},"Dr. Raphael Reischuk","Group CTO & Partner",{"title":358,"url":359,"internal":360},"","https:\u002F\u002Fwww.linkedin.com\u002Fin\u002Freischuk\u002F",false,"raphael.reischuk@zuehlke.com",{"id":363,"sharedMediaLegend":216,"mediaImage":364,"name":377},"173729",{"url":365,"width":366,"height":366,"alt":367,"title":216,"size":368,"mime":223,"variations":216,"authorVariations":369},"https:\u002F\u002Fcms.zuehlke.com\u002Fsites\u002Fdefault\u002Ffiles\u002Fimages\u002Fraphael-reischuk.jpeg",648,"Raphael Reischuk",94018,[370,373,374,375,376],{"name":371,"url":372,"width":366,"height":366},"FOCAL_POINT11_SMALL","https:\u002F\u002Fcms.zuehlke.com\u002Fsites\u002Fdefault\u002Ffiles\u002Fstyles\u002Ffocal_point_1_1_small\u002Fpublic\u002Fimages\u002Fraphael-reischuk.jpeg.webp?itok=Wiigey6e",{"name":371,"url":372,"width":366,"height":366},{"name":371,"url":372,"width":366,"height":366},{"name":371,"url":372,"width":366,"height":366},{"name":371,"url":372,"width":366,"height":366},"raphael-reischuk.jpeg",{"data":379},{"relatedContentView":380},{"id":381,"pageInfo":382,"results":385},"3dad2dac-900c-48b3-9380-0814b1c1f4f1",{"page":383,"pageSize":384,"total":384},0,3,[386,416,450],{"id":387,"path":388,"sharedTeaserTitle":389,"sharedTeaserRefMedia":390,"sharedTaxrefIndustries":407,"sharedTaxrefExpertises":414},"27078","\u002Fen\u002Finsights\u002Fkey-aspects-of-cybersecurity-by-design-in-medical-grade-connected-healthcare","Key aspects of cybersecurity by design in medical-grade connected healthcare ",{"id":391,"sharedMediaLegend":216,"mediaImage":392,"name":406},"173275",{"url":393,"width":394,"height":395,"alt":221,"title":216,"size":396,"mime":223,"variations":216,"relatedContentVariations":397},"https:\u002F\u002Fcms.zuehlke.com\u002Fsites\u002Fdefault\u002Ffiles\u002Fimages\u002FMedical%20equipment%20in%20the%20ICU%20ward%201.jpg",1000,667,371907,[398,400,401,404,405],{"name":226,"url":399,"width":331,"height":332},"https:\u002F\u002Fcms.zuehlke.com\u002Fsites\u002Fdefault\u002Ffiles\u002Fstyles\u002Ffocal_point_3_2_small\u002Fpublic\u002Fimages\u002FMedical%20equipment%20in%20the%20ICU%20ward%201.jpg.webp?itok=Ce-3NTxa",{"name":226,"url":399,"width":331,"height":332},{"name":402,"url":403,"width":394,"height":395},"FOCAL_POINT32_MEDIUM","https:\u002F\u002Fcms.zuehlke.com\u002Fsites\u002Fdefault\u002Ffiles\u002Fstyles\u002Ffocal_point_3_2_medium\u002Fpublic\u002Fimages\u002FMedical%20equipment%20in%20the%20ICU%20ward%201.jpg.webp?itok=KF_kRul4",{"name":402,"url":403,"width":394,"height":395},{"name":402,"url":403,"width":394,"height":395},"Medical equipment in the ICU ward 1.jpg",[408,411],{"id":409,"name":410},"826","Healthcare providers",{"id":412,"name":413},"13","MedTech",[415],{"id":347,"name":348},{"id":417,"path":418,"sharedTeaserTitle":419,"sharedTeaserRefMedia":420,"sharedTaxrefIndustries":437,"sharedTaxrefExpertises":439},"7120","\u002Fen\u002Finsights\u002Flow-code-not-low-security","Why low code doesn’t have to mean low security",{"id":421,"sharedMediaLegend":216,"mediaImage":422,"name":436},"6651",{"url":423,"width":424,"height":425,"alt":426,"title":216,"size":427,"mime":223,"variations":216,"relatedContentVariations":428},"https:\u002F\u002Fcms.zuehlke.com\u002Fsites\u002Fdefault\u002Ffiles\u002Fimages\u002Flow-code-cyber.jpg",1080,810,"cutout of a keyboard",146618,[429,431,432,434,435],{"name":226,"url":430,"width":331,"height":332},"https:\u002F\u002Fcms.zuehlke.com\u002Fsites\u002Fdefault\u002Ffiles\u002Fstyles\u002Ffocal_point_3_2_small\u002Fpublic\u002Fimages\u002Flow-code-cyber.jpg.webp?itok=IhHH4eou",{"name":226,"url":430,"width":331,"height":332},{"name":402,"url":433,"width":424,"height":268},"https:\u002F\u002Fcms.zuehlke.com\u002Fsites\u002Fdefault\u002Ffiles\u002Fstyles\u002Ffocal_point_3_2_medium\u002Fpublic\u002Fimages\u002Flow-code-cyber.jpg.webp?itok=-cv-8nwL",{"name":402,"url":433,"width":424,"height":268},{"name":402,"url":433,"width":424,"height":268},"low-code-cyber.jpg",[438],{"id":343,"name":344},[440,441,444,447],{"id":347,"name":348},{"id":442,"name":443},"891","New technologies",{"id":445,"name":446},"21","Software engineering",{"id":448,"name":449},"897","Low code",{"id":451,"path":452,"sharedTeaserTitle":453,"sharedTeaserRefMedia":454,"sharedTaxrefIndustries":472,"sharedTaxrefExpertises":476},"26295","\u002Fen\u002Finsights\u002Ftop-emerging-manufacturing-industry-trends-for-2025","Top emerging manufacturing industry trends for 2025",{"id":455,"sharedMediaLegend":216,"mediaImage":456,"name":471},"170921",{"url":457,"width":458,"height":459,"alt":460,"title":216,"size":461,"mime":223,"variations":216,"relatedContentVariations":462},"https:\u002F\u002Fcms.zuehlke.com\u002Fsites\u002Fdefault\u002Ffiles\u002Fimages\u002Fzuehlke_AI_in_the_value_chain_industry.jpg",1023,816,"Man looks at his tablet",226724,[463,465,466,469,470],{"name":226,"url":464,"width":331,"height":332},"https:\u002F\u002Fcms.zuehlke.com\u002Fsites\u002Fdefault\u002Ffiles\u002Fstyles\u002Ffocal_point_3_2_small\u002Fpublic\u002Fimages\u002Fzuehlke_AI_in_the_value_chain_industry.jpg.webp?itok=dP9G7zbI",{"name":226,"url":464,"width":331,"height":332},{"name":402,"url":467,"width":458,"height":468},"https:\u002F\u002Fcms.zuehlke.com\u002Fsites\u002Fdefault\u002Ffiles\u002Fstyles\u002Ffocal_point_3_2_medium\u002Fpublic\u002Fimages\u002Fzuehlke_AI_in_the_value_chain_industry.jpg.webp?itok=rXwMTWeL",682,{"name":402,"url":467,"width":458,"height":468},{"name":402,"url":467,"width":458,"height":468},"zuehlke_AI_in_the_value_chain_industry.jpg",[473],{"id":474,"name":475},"10","Industrial sector",[477,480,483],{"id":478,"name":479},"110","AI",{"id":481,"name":482},"874","GenAI",{"id":347,"name":348}]