Industry executives and experts share their predictions for 2025. Read them in this 17th annual VMblog.com series exclusive.
By Bojan Simic, CEO and co-founder of HYPR
Today’s rapidly evolving digital landscape has created a
reality where Identity is the security perimeter of any organization. One of
the most effective strategies is to shift the focus from merely securing
accounts to authentically verifying the actual human being behind the account.
This approach ensures that the individual accessing the system is genuinely the
rightful user, not just someone with stolen credentials.
Multi-factor verification (MFV), which combines something
the user has (like their phone as well as physical document), critical context
about them (such as their location) and something they are (like face
recognition or fingerprint), significantly enhances security. It protects
against common threats such as phishing, credential theft, and unauthorized
access. By confirming the actual identity of the user, organizations can
maintain the integrity of their systems, safeguard sensitive data, and build trust
with their users.
Adding layers of security has been a strong point of MFA,
but its focus remains on the “what”-what a user knows (password), what they
have (token), and what they are (biometric). In contrast, MFV dives deeper,
concentrating on the “who” by analyzing a user’s behavior, devices, and
context.
MFV is a continuous identity security system that blends in
dynamic and contextual info. It knows the user and keeps impostors with stolen
credentials out. It knows when to remove or add friction based on signals from
the user’s mobile, endpoints, and browsers. This creates an identity assurance
system that’s smarter, more adaptive, and way ahead of the game in protecting
the modern enterprise.
Predictions: IT
Security in 2025
It’s essential to look ahead and anticipate future trends in
IT security. Bojan Simic, CEO and
co-founder of HYPR,
the Identity Assurance Company, emphasizes that 2025 will bring a mix of
challenges and innovations. From increasingly sophisticated cyber-attacks to
the rise of advanced AI-driven security measures, the digital landscape is
evolving rapidly. Simic underscores the necessity for organizations to stay
proactive by adopting modern security strategies to protect sensitive data and
maintain system integrity in a world where hackers are weaponizing AI.
Let’s explore some of the key IT security predictions for
2025 that will shape how organizations will defend against emerging threats.
The Era of Passwords
is Ending: The alarming rise in credential misuse and authentication
weaknesses-cited by 91% of recently surveyed IT professionals-signals the
urgent need for a shift. Organizations that fail to adopt passwordless security
measures will face escalating breaches and eroding customer trust. It’s time to
dismantle the password paradigm by adopting passkeys and ensuring that access
is always phishing resistant.
Third Parties Will be
the Weakest Link in the Chain: Reliance on third parties for software and
services is critical for business function and revenue. However, when it comes
to enterprises, their suppliers are often not under the same level of security
scrutiny as their internal teams. This has led to several major breaches in
recent years and will continue to do so. It will be critical for businesses to
hold their suppliers and third parties accountable from a cybersecurity
standpoint in order to prevent these incidents.
AI: Friend and Foe in
Cybersecurity: While most organizations believe AI will provide an edge
over cybercriminals, an overreliance on AI can backfire. As AI-powered threats
evolve, organizations must develop robust defenses that are more deterministic
in nature and do not rely on knowledge based factors that an AI can easily
bypass.
Consolidation and
Innovation are Key: A shocking 69% of companies breached this past year
were through authentication processes and 78% were targeted by identity-based
attacks-the current security tools are insufficient. Financial institutions and
enterprises must consolidate their security platforms to drive efficiency and
embrace cutting-edge innovations like passkeys and biometric verification.
Trust is the New
Currency: As cybersecurity concerns grow, most customers of financial
institutions are ready to switch to another bank after a data breach, and most
making a switch will favor banks offering passkeys. Building a resilient
identity assurance framework will be critical to maintaining trust and securing
a competitive edge in the market.
The Cost of Inaction
is Unsustainable: The financial toll of weak authentication is staggering,
with organizations losing an average of $5,479,819 per breach and significant
help desk costs. Embracing advanced security solutions isn’t just a
technological imperative-it’s a financial one, crucial for protecting the
bottom line.
Multifactor
Verification: The Next Frontier: The future of IT security lies in
multifactor verification (MFV). Organizations must go beyond traditional
methods and integrate multifactor solutions that blend AI, biometrics, and
contextual data to create a seamless, secure user experience. This proactive
approach will safeguard against emerging threats while enhancing overall
security posture.
##
ABOUT THE AUTHOR
Bojan Simic is the Chief Executive Officer of HYPR. His
vision for the elimination of shared secrets and his experience in
authentication and cryptography serve as the underlying foundation for HYPR
technology and company strategy. Previously, he served as the information
security consultant for Fortune 500 enterprises in the financial and insurance
verticals conducting security architecture reviews, threat modeling, and
penetration testing. Bojan has a passion for deploying applied cryptography
implementation across security-critical software in both the public and private
sectors.
