The World Economic Forum (WEF) today highlighted the increasing complexity in the cyber landscape, which has significant implications for organizations and nations.
The Forum, in its ‘Global Cybersecurity Outlook 2025’ report just released today linked the complexity to the rapid growth of emerging technologies, prevailing geopolitical uncertainty, the evolution of threats, regulatory challenges, vulnerabilities in supply chain interdependencies and the growing cyber skills gap.
According to the organization, growing complexity further exacerbates cyber inequity, deepening the divide between developed and emerging economies, expanding sectoral disparities, and widening the gap between large and small organizations.
Commenting on the report’s findings, WEF Managing Director, Jeremy Jurgens, said: “Cyberspace is more complex and challenging than ever due to rapid technological advancements, growing cybercriminal sophistication and deeply interconnected supply chains. The Global Cybersecurity Outlook equips leaders with essential insights to navigate these challenges and strengthen cyber resilience.
“Collaboration between public and private sector stakeholders is paramount to secure the benefits of digitalization for all”, the foremost economist added.
The report identifies key factors driving the accelerating complexity and unpredictability in the cyber landscape, along with insights into their cumulative impact on both organizational and national cybersecurity posture.
These include Supply chain risk interdependencies which introduces vulnerabilities within interconnected supply chains, contributing to the growing complexity in cyberspace; 54% of large organizations consider supply chain challenges as the greatest barrier to achieving cyber resilience; and Geopolitical tensions as the prevailing turmoil has affected the perception of risks, with one in three CEOs citing cyber espionage and loss of sensitive information/ intellectual property theft as their top concern, while 45% of cyber leaders are concerned about disruption of operations and business processes.
Also, the report identified Security in the Intelligent Age as a risk based on thea paradox between the recognition of AI-driven cybersecurity risks and the rapid implementation of AI without the necessary security safeguards to ensure cyber resilience, adding that while 66% of organizations expect AI to have a major impact on cybersecurity in 2025, only 37% report having processes in place to assess the security of AI tools before deployment.
On the Evolution of the threat landscape, the report finds unprecedented level of sophistication in cyber threats enabled by emerging technologies enhances malicious actors’ ability to operate scams and social engineering attacks, generate disinformation, and execute ransomware at a pace, scope and scale never seen before, as nearly 47% of organizations cite adversarial advancements powered by GenAI as their primary concern.
This is even as it showed that while Regulations bolster cyber resilience, 76% of CISOs at the 2024 Annual Meeting on Cybersecurity reported that fragmentation of regulations introduces significant compliance challenges.
The WEF’s report also indicated on Workforce challenges that since 2024, the cyber skills gap has increased by 8%, with two in three organizations lacking essential talent and skills to meet their security requirements; only 14% of organizations are confident that they have the people and skills they need today.
In his remarks Global Lead, Accenture Security, Paolo Dal Cin, said: “Cybersecurity threats are more complex and unpredictable than ever and can directly impact an organization’s financial stability. The disruptive force of AI, coupled with supply chain vulnerabilities and geopolitical tensions, calls for a more proactive and collaborative approach to ensure a strong cyber resilient posture across all industries.
“C-suite leaders must adopt a security-first mindset from the outset to confidently navigate these challenges with cybersecurity as an enabler that keeps our businesses and organizations resilient”, the security expert advocated.
The report calls for a shift in perspective from cybersecurity to enhanced cyber resilience – an organization’s ability to mitigate the impact of significant cyber incidents on its goals and objectives.
Additionally, the report underscores the importance of evaluating cyber risks from a socioeconomic perspective, which is essential for organizations and nations to effectively allocate resources and strengthen their resilience against cyber threats.
Speaking on the report’s findings, Minister of Science, Innovation, Technology and Telecommunications of Costa Rica, Paula Bogantes Zamora, explained: “The 2022 cyberattacks on Costa Rica served as a wake-up call, underscoring the need for a fundamental shift in recognizing cybersecurity as a critical investment for the future, rather than a mere expense.
“Through this journey, we have recognized the need to strengthen our ecosystems by collaborating with our neighbours to enhance resilience not only in Costa Rica but also across the region”, the minister added
The WEF’s ‘Global Cybersecurity Outlook 2025’ provides a comprehensive analysis of the escalating complexities in cybersecurity, with actionable insights to help leaders navigate the ever-changing cyberspace.
The report stressed the need for collaborative efforts across the ecosystem to secure the interconnected networks essential to our digital economy and to effectively address the increasing shortage of cybersecurity skills.
In addition, it also explores the economic implications of cybersecurity and highlights the critical role of leadership in prioritizing cybersecurity as a core business enabler.