A new year is just around the corner which, for many, means an opportunity to reflect on the previous 12 months – what did we do, how did we do it, what can we do better. However, rather than dwell on the past, we’re fast-forwarding straight to 2025 to see what we can expect in the next 12 months, and what’s on the horizon in the world of cyber security.
We’ve taken a dive into some trusted resources, fonts of knowledge and expert insights to bring you what we believe will be some of the major topics of discussion that matter to our customers at Black Swan Cyber Security Solutions.
Strap yourselves in, because here we go.
1. Advanced phishing threats
Charities are all too often targeted by phishing attacks, predominantly because fraudsters and cyber criminals know they handle a wide range of sensitive data. By sending unsolicited emails that look like they are genuine and the ‘real thing’ from a legitimate charity, criminals can dupe charity employees into sharing that data, or to send money.
Indeed, 91% of businesses have experienced attacks, says the Information Commissioner’s Office (ICO), and it is expected to only become more common as we move into 2025.
According to Charity Digital, advanced phishing will target social media channels and official websites to mislead recipients into sharing data and information. Some of the techniques the cyber criminals will use include spearphishing, whaling, smishing, pharming and deceptive phishing, which are a level above the crude, generic emails we have learned to ignore.
As Charity Digital adds: “Cyber criminals typically do their research on targets. Harvesting names, emails, and telephone numbers from social media and websites, information requests appear to be from real people. Some prey on mid-level employees and trick them by using authority figures.”
While it is important to always remain vigilant and alert to phishing attacks, that sometimes will not be enough. At Black Swan, we understand the challenges faced by charities and non-profit organisations, and can tailor solutions specifically to your needs, ensuring advanced phishing is something less for you to worry about in 2025.
2. Zero trust architecture
Zero trust architecture is a security model that enforces security policies for each individual connection between users, devices, applications and data, and operates on the principle of “never trust, always verify”.
In an age where remote and hybrid working is more prevalent, more and more businesses are now adopting zero trust models to enhance their security measures – and this is expected to increase in 2025.
Remote workers, hybrid cloud services and personal devices are at risk from cyber attacks, and businesses are now addressing that by implementing zero trust across the board – according to a TechTarget Enterprise Strategy Group report, more than two thirds of organisations are doing so.
3. The rise of ransomware
Because cyber criminals are now relying more on AI and automation to enhance their attacks, ransomware is set to take on a greater level of sophistication in 2025, so businesses must constantly adapt their defence strategies.
These new methods will enable ransomware to quickly spread across networks, meaning early detection is more important than ever. Crucially, businesses of all sizes are expected to be targeted even more by ransomware attacks during the next 12 months, so the time to act is now.
It was a record year for blackmailers in 2024, and next year is unlikely to get better, with IT security providers reporting an increase in ransomware attacks – for example, Swiss security provider Acronis recorded an increase in ransomware detections of around 32% between the fourth quarter of 2023 and the first quarter of 2024. According to VPN Haus, “the company therefore continues to see ransomware as a major threat to small and medium-sized enterprises (SMEs), especially in critical industries such as government and healthcare”.
We would recommend you begin by securing your business with our Cyber Essentials security package, which will provide you with the essential cyber defences your business needs.
4. Supply chain attacks
Never underestimate how smart or clever cyber criminals can be. They will know how your business operates, and how you depend on third-party tools and services.
These hackers will target a weak link in your supply chain in a bid to compromise your systems. For example, if you receive a software update from a trusted vendor, it could contain a malware infection which will immediately spread to your network.
Through their own research, Gartner showed how cyber criminals are targeting software development systems to compromise software supply chains, predicting that “…by 2025, 45% of organisations worldwide will have experienced attacks on their software supply chains, a three-fold increase from 2021.”
We cannot stress enough that your vendors need to take cyber security as seriously as you do – but it’s up to you to enforce that – and that you must vigilantly monitor software updates.
5. Threats from IoT devices
How many smart devices based on the Internet of Things (IoT) do you have dotted around your offices?
SMBs are more reliant than ever on IoT appliances, such as security cameras, or thermostats, or smart speakers, to name just three examples, and they are vulnerable to attacks from cyber criminals.
These devices are often the weakest links in your cyber security set-up because some have minimal built-in security measures. As a result, they are becoming more attractive targets for cyber criminals because it gives them unauthorised access to your network, to your sensitive data, and ultimately disrupting your business or organisation.
There are steps you can take, such as implementing stricter policies for these devices or using a separate network. However, to protect your business and rest easy knowing it is secure, we would recommend you consider an all-encompassing package to do just that – see what Black Swan can offer, tailored especially for you, right here.
What next?
We can expect cyber security threats and attacks to increase in 2025. It’s what you do now to prepare yourself, your business, your organisation, that matters.
It’s imperative to take cyber security seriously, however big or small your organisation, and not to take cyber criminals lightly.
At Black Swan Cyber Security Solutions, we understand the threats you face, we know how to counteract them, and we know how to protect you.
Please get in touch with us today. We’re here to help you stay safe and secure in 2025, and we’d love to hear from you.
