Industry executives and experts share their predictions for 2025. Read them in this 17th annual VMblog.com series exclusive.
By Girard Ordway, Global Leader, Solutions Architect, ExtraHop
With 2025 upon us, we find ourselves in yet another year grappling with a variety of complex challenges within the cybersecurity space. As we reflect on the major cyber threats that have occurred over the course of the last year, it’s a good reminder that cybersecurity is never a one-time solution fix but rather an evolving effort to protect the assets and reputations of any organization and the individual.
Here are three key predictions that provide insight into areas where we will continue to see threats emerging and how we can be more resilient against cyber risks as an industry.
1. Zero trust goes zero to 100. 2025 will be the year zero trust finally moves from talk to action. After years of talking about what it is and how it works, zero trust adoption will accelerate across businesses of all sizes. As organizations buy and renew security solutions, they will increasingly demand that they demonstrably support zero trust and integrate well with their current stack.
2. Rise of RaaS. 2024 served a warning from ransomware actors: It’s only going to get worse. In 2025, the number of attacks will skyrocket, with Ransomware-as-a-Service (RaaS) platforms making it easier for less skilled groups to participate. The barrier to entry will be massively lowered, and we’ll see more money lost in ransom payments than any year before.
3. Breaches are inevitable. Security leaders will start to realize that no security tool will stop an attacker from breaching their organization. There is no moat or impenetrable brick wall to secure the perimeter, and they must prepare. As attackers continue to evolve their techniques, security leaders must arm their teams with tools and protocols that can quickly help them identify and resolve threats post-compromise to ensure as little business impact as possible.
As threats become more pervasive and elaborate, organizations continuously keeping a pulse on their attack surface will stay ahead of the curve. In 2025, companies looking to enhance their cyber posture should focus on implementing zero trust into their tech stack, putting actionable ransomware preparedness plans in motion, and improving risk management practices for breaches to better ensure better security outcomes now and in the future.
##
ABOUT THE AUTHOR
Girard Ordway is a Global Leader, Solutions Architect for ExtraHop, building integrations and better together stories to deliver untapped cybersecurity value for customers and partners. With his technical expertise and creativity, Girard provides innovative solutions that help drive businesses.
