As the cybersecurity landscape rapidly evolves, value-added resellers (VARs) and managed services providers (MSPs) must stay ahead of emerging trends to protect their clients effectively. Leading cybersecurity experts at NCC Group, a global cyber and software resilience business operating across multiple sectors, highlight the critical areas where AI, quantum computing, and cyber-biosecurity will shape the future of cybersecurity:
Alejandro Rivas-Vasquez, global head of digital forensics and incident response, says:
“AI and ML will be used in cyber warfare, with collateral damage outside conflict zones due to hyper-connectivity.”
Bobbie Walker, managing consultant, predicts:
“In the next five years, cybersecurity will extend beyond protecting digital systems to safeguarding people directly through implantable technology. Neural interfaces, bio-augmentation, authentication chips, and advanced medical implants will revolutionize our interaction with technology and introduce significant risks.
Hackers could exploit neural interfaces to control actions or perceptions, leading to cognitive manipulation and breaches of personal autonomy. Continuous health and behavioral data monitoring through implants raises substantial privacy concerns, with risks of misuse by malicious actors or invasive government surveillance.
New frameworks bridging technology, healthcare, and privacy regulations will be essential to mitigate these risks. Standards for “digital bioethics” and ISO standards for bio-cyber security will help define safe practices for integrating technology into the human body while addressing ethical dilemmas.
The emerging field of “cyber-biosecurity” will push us to rethink cyber security boundaries, ensuring that technology integrated into our bodies is secure, ethical, and protective of the individuals using it. Early studies on brain-computer interfaces (BCIs) show that adversarial inputs can trick these devices, highlighting the potential for abuse. As implants evolve, the risks of state-sponsored cyber warfare and privacy breaches grow, emphasizing the need for robust security measures and ethical considerations.”
Alessia Oliveri, product manager, comments:
“The race to develop quantum-safe approaches and algorithms will intensify, with significant efforts directed towards quantum-capable decryption. This battle will shape cybersecurity’s future as defensive and offensive capabilities evolve rapidly.
The emergence of dark AI marketplaces will see technology being leveraged for dual purposes, automating attacks, scams, and threats. This trend will pose significant challenges for cybersecurity professionals as they combat increasingly sophisticated AI-driven threats.
The increased use of blockchain technology will bring about new security challenges, particularly with smart contracts. The possibility of these contracts being hacked will necessitate robust security measures and innovative solutions to protect blockchain-based systems.”
Andy Davis, global research director, believes:
“As brain-computer interfaces (BCIs) become more sophisticated, the protection of neural data will emerge as a critical aspect of cyber security. This will involve developing advanced encryption and access control mechanisms to prevent unauthorized access to individuals’ thoughts, emotions, and memories. Regulatory frameworks will likely evolve to address the ethical and privacy concerns of neural data protection.
With the commercialization of space travel and the establishment of space tourism, cybersecurity measures will need to extend beyond Earth. Protecting spacecraft, space stations, and communication networks from cyber threats will become paramount. This will include securing data transmission between Earth and space and ensuring the integrity and safety of onboard systems to prevent potential sabotage or hacking incidents.
As digital twins become integral to the operation and testing of physical systems, they will become prime targets for cyberattacks. Cybersecurity strategies must focus on protecting these virtual replicas to prevent disruptions in the corresponding real-world systems. This will involve implementing robust security protocols to safeguard the data and processes within digital twins, ensuring their reliability and accuracy.”
Jon Renshaw, deputy director of commercial research, says:
“The potential for AI-driven ransomware attacks on a large scale is particularly concerning.
A breakthrough in quantum computing could lead to the development of quantum computers capable of breaking current cryptographic algorithms. This scenario is akin to the Y2K bug, where we know a transition to post-quantum cryptography is necessary, but the exact timing is uncertain. A sudden scientific breakthrough could mean the need for new cryptographic solutions becomes urgent.
The increasing connectivity of infrastructure heightens the risk of cyber warfare and terrorism. The Ukraine conflict has shown the effectiveness of cyber operations in modern warfare. As connectivity grows, so does the attack surface for nation-state actors and other threat actors.
The evolution of personal connected technology, from wearables to brain-computer interfaces (BCIs), could revolutionize how we interact with cyber information, potentially improving response times for defenders. However, this also introduces new vulnerabilities, with the possibility of cyberattacks targeting human bodies through implants or BCIs.”
Dr. Liz James, managing security consultant, predicts:
“Cyberattacks will increasingly target vehicle fleets and cloud vulnerabilities, shifting focus from organizational assets to product fleet management systems. This could lead to denial of service through malicious over-the-air (OTA) updates or reputational damage from unauthorized messages on infotainment displays.”
Josh Waller, cyber security consultant, comments:
“In 2025, industrial operators may begin to scale back the integration of OT, ICS, and SCADA systems with broader corporate networks. This shift will be driven by the need to protect against evolving cyberthreats, reversing the trend of increased connectivity and remote management.”
Abhijeet Udas, executive principal consultant, adds:
- “Attacks on 5G devices will become more prevalent.
- Using connected cars in cyberattacks or other malicious activities could have catastrophic consequences.”
Paul Vlissidis, senior advisor, believes that:
“As businesses increasingly adopt generative AI without fully considering security implications, a significant data breach is inevitable. This event will serve as a wake-up call, highlighting the urgent need for robust AI security measures.”
Kerby Bacotot, associate technical architect, comments:
“Advanced AI technologies will increasingly be used for automated reconnaissance and identifying complex system vulnerabilities. From simple SQL injection flaws to sophisticated AI navigating through active directory networks and evading antivirus software, the potential for exploitation is vast. This will likely lead to stricter regulations defining the boundaries and limits of these technologies.”
David Brauchler, technical director, adds:
“As AI and large language models (LLMs) become mainstream, agentic AI will emerge, capable of interpreting user instructions and executing actions autonomously. This will lead to new security challenges and the development of advanced security controls for AI-integrated architectures, focusing on data trust management and dynamic adjustment of agent privileges based on execution context.
AI agents will increasingly be used to streamline workflows, particularly in security defense and penetration testing. These technologies will automate tedious tasks and efficiently search large data sources, fostering a strong symbiosis between AI tools and human operators. Rather than replacing individual contributors, AI will amplify their capabilities.”
Ray Robinson, director of OT, concludes:
“Safety and cyber risk assessments will converge, leading to more comprehensive evaluations of potential threats.
Security Operations Centers (SOCs) will merge OT and IT threat and vulnerability monitoring, creating a unified approach to security.
There will be a greater convergence of physical and cyber security measures, providing a holistic approach to safeguarding assets and information.”
The future of cybersecurity is marked by rapid advancements in AI, quantum computing, and cyber-biosecurity, presenting opportunities and challenges for VARs and MSPs. By staying informed about these trends and proactively integrating advanced security measures, VARs and MSPs can be trusted advisors and protect their clients from evolving cyber threats. Embracing these innovations will enhance their service offerings and ensure they remain competitive in an increasingly complex cybersecurity landscape.
