State-sponsored attacks, while not a new phenomenon, are expected to intensify amidst ongoing global conflicts such as those in Ukraine and Gaza
Artificial intelligence has been identified as one of the most significant security threats for 2025, according to Google’s *Cybersecurity Forecast 2025*. Alongside AI, other primary concerns include state-sponsored cyberattacks and the persistent menace of ransomware. The report highlights the evolving cybersecurity landscape as geopolitical tensions and technological advancements reshape threat dynamics.
State-sponsored attacks, while not a new phenomenon, are expected to intensify amidst ongoing global conflicts such as those in Ukraine and Gaza. Critical infrastructure remains a prime target for politically motivated cyber campaigns. Google has named the “Big Four” geopolitical threats to Western cybersecurity: Russia, China, Iran, and North Korea.
The role of AI in both defending against and executing cyberattacks is anticipated to grow significantly in the coming year. Google’s forecast predicts the emergence of a “second phase of AI security,” driven by the large-scale adoption of semi-autonomous security operations. While AI offers potential as a powerful defence tool, its use in cyberattacks also raises concerns. Threat actors are increasingly leveraging generative AI tools to enhance their capabilities, posing challenges for cybersecurity teams.
Generative AI, powered by large language models (LLMs), is expected to fuel an uptick in social engineering attacks, including phishing, vishing, and the creation of deepfakes. These tools enable attackers to craft more convincing and scalable exploits, making it harder for organisations to prevent incidents effectively.
Ransomware and data theft extortion, which reached unprecedented levels in 2024, are projected to remain major concerns in 2025. Custom malware attacks are likely to evolve further, targeting organisations across various sectors.
As cybersecurity teams prepare for the challenges ahead, Google’s report underscores the need for vigilance and adaptation in the face of increasingly sophisticated threats. The integration of AI into cybersecurity strategies is expected to play a critical role in countering emerging risks while navigating the complexities of a rapidly changing digital environment.
