Cybercrime has become industrialised. From AI-powered phishing to live ransomware kits, our latest report reveals what your business must prepare for now.
The digital threat landscape is shifting faster than most organisations can respond. Attackers are smarter, tools are more accessible, and AI is helping even unskilled actors launch advanced attacks.
Sopra Steria’s State of Cybersecurity 2025 is based on real-world incidents, observed across thousands of hours of frontline cyber defence. This year’s findings show how threats are evolving – and where businesses must act to
stay resilient.
There’s no one-size-fits-all solution, but there are five major trends no organisation can afford to ignore:
1. Criminals are using your tools
From Remote Monitoring and Management (RMM) tools to legitimate admin software, attackers are increasingly turning your own infrastructure against you.
2. Phishing just got personal
Phishing remains the top attack vector – but it now includes real-time impersonation, browser hijacking, and full-service phishing kits. MFA isn’t optional anymore.
3. Malware is back – and it’s stealing credentials
Infostealers like Lumma are on the rise, with attackers harvesting passwords and selling them on. Without endpoint protection, breaches are just a click away.
4. AI is empowering attackers
Generative AI is enabling deepfakes, automated malware, and scalable social engineering. Shadow AI use by employees also introduces unseen risks.
5. New regulation is coming fast
Look at Norway’s new Digital Security Act, shaped by NIS2 and DORA, which will demand cross-sectoral resilience. Compliance is no longer a checkbox – it’s a strategic necessity.
About the report
The State of Cybersecurity 2025 is grounded in analysis from Sopra Steria’s Cybersecurity Centre, covering more than 8,700 hours of threat monitoring. It captures how cybercriminals adapt, where defences fail, and how you can respond.