Industry executives and experts share their predictions for 2025. Read them in this 17th annual VMblog.com series exclusive.
By Camellia Chan, CEO and co-founder of Flexxon (AI cybersecurity firm)
2024 showed once again that as technology becomes more advanced, so do the tactics of cyber criminals. New security standards will be essential in 2025 – here’s what to expect:
- More attacks on Critical National Infrastructure (CNI): From American Water to the NHS, these complex organisations and the increasing amount of data they store are a prime target. The impact can be life-threatening. Following the UK government’s classification of data centres as CNI, we will also likely see an increase in attacks here. CNI cannot afford to rely solely on traditional software security such as firewalls and VPNs. These reactive methods can be too easily manipulated, exploited by Zero Day attackers, or weakened by human error.
- Complex software issues: The CrowdStrike outage was a watershed moment that exposed the danger of relying exclusively on software-based cybersecurity solutions and reminds us that we must separate security and operations. With a hardware layer in addition to software, businesses can be confident that even if the software layer malfunctions, their underlying security will remain operational.
- More of AI and its double-edged sword: AI lowers the barriers of entry for cybercriminals, enabling them to craft more convincing phishing attacks, automate malware creation, and evolve their tactics at an accelerated pace. At the same time, AI will play a critical role in the cybersecurity space. AI tools that help secure the entire life cycle of an attack – from incident detection to response and recovery – are needed in 2025 and beyond.
##
ABOUT THE AUTHOR
Camellia is the co-founder and CEO of Flexxon. Her role is the oversight of business development and growth, industry partnerships, and global expansion. She founded Flexxon in 2007 as a storage specialist firm, before branching into cybersecurity based on customer demand.
Camellia has experience in regional multinational corporations: Flextronics, GBM, Flezon Acoustic. As well as AI, she regularly speaks about women in cyber and how to retain diverse talent.






