12 CIS Experts' Cybersecurity Predictions for 2025

Experts from the Center for Internet Security outline 2025 cybersecurity predictions, highlighting an AI-driven attack/defense arms race, identity-centric zero trust, expanding supply-chain and IT/OT-ICS risks, and a widening attack surface from IoT and edge computing. They anticipate growth in phishing-as-a-service and ransomware pressure, increased governance focus (including K-12), consolidation of security tooling, cloud security and data sovereignty requirements, and initial adoption of post-quantum cryptography, while urging due diligence on AI-embedded software, defense-in-depth, and workforce awareness to keep pace with multidimensional threats.