New AI Challenges Will Test CISOs & Their Teams in 2025

This strategic briefing outlines three key enterprise security trends for 2025: (1) the emergence of vulnerabilities in proprietary large language models (LLMs) that could create broad, systemic attack surfaces; (2) increased demand for adaptive identity and access management to support cloud-native and non-human AI service identities; and (3) the use of AI to scale security within DevOps by automating tasks and integrating security earlier in the development lifecycle. It advises CISOs to balance adopting AI-driven defensive capabilities with managing new risks, supply-chain exposure from consolidated proprietary models, and evolving regulatory requirements.