Ivanti's report identifies ransomware as the leading threat for 2025
Ivanti has published its 2025 State of Cybersecurity Report, revealing that ransomware is regarded as the leading anticipated threat for 2025. The report, which surveyed over 2,400 cybersecurity professionals and executives, indicates that 38% believe ransomware attacks will become more dangerous due to advancements in Artificial Intelligence (AI).
Despite acknowledging the risks, only 29% of respondents report feeling well-prepared to respond to ransomware threats. This presents a notable gap in organizational readiness, which underscores the necessity for enhanced security protocols. The report advocates for a sophisticated approach to cybersecurity that balances business risk with operational needs, rather than focusing solely on avoiding threats.
The concept of exposure management is highlighted within the findings, with 49% of security leaders expressing a good understanding of its importance. Despite this, only 22% of organizations plan to increase their investment in exposure management in 2025, pointing to a lack of actionable commitment.
Daniel Spicer, Chief Security Officer at Ivanti, noted that organizations should evaluate their vulnerabilities regarding overall business risk, emphasizing the need for collaboration among security and business departments to effectively assess risks and implement strategies.
Key findings from the report include:
- Risk tolerance assessment frameworks are documented by 83% of security teams, but only 51% effectively adhere to these frameworks, rendering them ineffective.
- One-third of professionals cite tech debt as a major concern, affecting basic security practices and increasing vulnerability to breaches.
- Data silos are prevalent, identified as a factor slowing security response times for 62% of respondents, with 53% indicating that such silos weaken their security posture.
The report calls for organizations to adopt exposure management, dismantle operational silos, and address technical debt to strengthen their security stance. By fostering effective collaboration between security teams and business leaders, organizations can work towards improved risk management and support overall growth.