News - Building cyber resilience for 2025’s threat landscape

Articles

Building cyber resilience for 2025’s threat landscape

Source By Kaspersky
23 hours ago

This year, Kaspersky’s solutions blocked more than 302 million malware attacks launched from online resources worldwide. It also detected over 85 million unique malicious URLs and prevented ransomware attacks on the computers of over 303,000 unique users.This highlights how important it is for businesses to ensure cyber resilience against a rapidly evolving threat landscape.According to Enterprise Strategy Group’s “SOC Modernisation and the Role of XDR” report from a survey conducted together with Kaspersky, 52% of companies consider security operations somewhat or significantly more difficult today than they were a few years ago.The primary reasons for this include a rapidly evolving threat landscape (41% of organisations named it), the expanding attack surface (40%) and its constant changes (39%), and the increased volume and complexity of security alerts (37%).With 2025 approaching, it is worth noting some of the major concerns when it comes to evolving cyberattacks.There is a significant rise in backdoored versions of AI (artificial intelligence) models. Advanced threat actors are also expected to leverage AI more aggressively to automate vulnerability detection, generate malicious scripts, and create deepfake content for spear-phishing campaigns.Also, on the supply chain side, cybercriminals are expected to target open-source ecosystems. These attacks are designed to exploit many people’s trust in open-source projects.Kaspersky also anticipates that cyber attackers will exploit the weak security protocols and outdated firmware of Internet of Things (IoT) devices.

Strengthening resilience

To effectively combat these and other concerns, organisations need to adopt a proactive and layered approach to cybersecurity.As such, there are different ways businesses can improve their cyber resilience.Investing in advanced endpoint detection and response (EDR) tools has become non-negotiable. By combining malware protection with monitoring and response capabilities, EDR solutions offer businesses enhanced visibility into threats.Kaspersky’s EDR solution, one of the building blocks behind the Kaspersky Next product line, delivers comprehensive endpoint protection coupled with advanced threat detection.Of course, there are businesses with complex infrastructures. This is where extended detection and response (XDR) tools deliver a comprehensive view of these IT environments.Kaspersky’s XDR integrates data from multiple sources, enabling the correlation and analysis of security events. This all-encompassing approach helps businesses stay ahead of sophisticated cyber threats.Another way to enhance cyber resilience is through the strengthening of authentication practices. Multifactor authentication (MFA) must be adopted to supplement passwords with additional verification methods.These can include one-time codes or biometrics to reduce the risk of unauthorised access.Maintaining up-to-date software across all devices is a familiar, but no less crucial, strategy for reducing vulnerabilities.An extensive patch management process ensures that known exploits are addressed as quickly as possible to mitigate potential entry points for attackers.

A new understanding

Traditional backup approaches must also evolve to counter sophisticated ransomware threats. It is imperative for businesses to implement ransomware-resistant backups stored offline and outside the network perimeter.This ensures quick data recovery in the event of an attack.Additionally, cybersecurity audits are essential for identifying and addressing vulnerabilities while gaining an understanding of the organisational threat footprint.Businesses should evaluate their networks, processes, and incident response plans regularly to ensure resilience against emerging threats.Cyber resilience is a company-wide responsibility. Tailored training programmes, such as Kaspersky Automated Security Awareness Platform, that can help employees recognise and respond to phishing attempts, social engineering tactics, and other threats, are important.Regular drills and simulations ensure readiness for real-world incidents and help employees understand how malicious users think when it comes to compromising defences.

Preparing for 2025

Being cyber resilient and having a comprehensive cybersecurity strategy in place go hand in hand. The threat landscape of next year will test the cyber resilience of every organisation whether in South Africa or internationally.Threats like ransomware, spyware, supply chain attacks or business email compromise, show the importance for companies to have security technologies optimal for them, be informed with the latest threat intelligence, and educate employees depending on their level of IT knowledge.At the same time, with advanced technologies like AI becoming both tools and targets, businesses must adopt a forward-thinking approach to cybersecurity.