WatchGuard predicts rise in AI-driven cyber threats by 2025

WatchGuard Technologies has released its 2025 Cybersecurity Predictions, emphasising the expected rise in AI-driven threats, long-con cyberattacks, and vulnerabilities within operational technology systems.

Corey Nachreiner, Chief Security Officer at WatchGuard Technologies, stated, "This year, we've noted how cybercriminals are becoming increasingly adept at leveraging advanced technologies to launch innovative attacks.

"In 2025, the cybersecurity landscape will demand a proactive, unified approach to defend against threats that are not only growing in complexity, but also becoming more accessible to bad actors through automation and AI advancements," he said.

The predictions indicate that by 2025, multimodal AI will be leveraged by cyber criminals to automate entire attack chains. These systems' capabilities to integrate text, images, voice, and code will allow attackers to create sophisticated phishing campaigns and malware deployment strategies, thus democratising advanced cyber threats.

Marc Laliberte, Director of Security Operations at WatchGuard, added, "From malicious use of multimodal AI to expanded supply chain compromises and the evolving challenges faced by CISOs, our predictions highlight areas where organisations and security teams must focus their efforts in 2025 to stay ahead of the curve."

The WatchGuard report also foresees an increase in attacks on lesser-known software dependencies as part of a shift towards long-term infiltration strategies. This approach involves cyber criminals maintaining a facade of legitimacy to exploit vulnerabilities within the software supply chain over an extended period.

With the convergence of operational technology (OT) and information technology (IT) systems, the deployment of AI-powered anomaly detection is predicted to become essential. This is expected to reduce reliance on complex, protocol-specific defensive measures and provide a technology-agnostic means to defend against emerging threats, the report said.

The role of the Chief Information Security Officer (CISO) is anticipated to become more challenging, with increased regulatory pressures and personal accountability leading to heightened burnout levels and a potential widening of the cybersecurity skills gap.

Despite the increased sophistication of cyber threats, intelligence agencies and law enforcement are reportedly enhancing their efforts to disrupt cybercriminal activities. This includes international partnerships and new interpretations of laws, making it more difficult and costly for threat actors to conduct attacks.

The predictions highlight a potential for cyber criminals to exploit the disillusionment with Generative AI (GenAI), particularly as it pertains to its use in deep fakes. The report suggests that, despite public scepticism, advancements in AI could still be leveraged by attackers in combination with other tactics to deceive organisations.