CISOs Warn of Escalating Cyber Threats: AI-Driven Attacks Pose Growing Risk

An overwhelming majority of chief information security officers (CISOs) anticipate a surge in cyber attacks over the next three years as organizations face an increasingly complex and AI-driven digital threat landscape. With 98% of CISOs expecting a rise in cyber attacks, they identify cybersquatting, domain-based attacks, and ransomware as top cybersecurity concerns. AI-powered domain generation algorithms are increasingly worrisome, with 87% of CISOs identifying them as a direct threat.

Key Takeaways:

  • 98% of CISOs expect a surge in cyber attacks over the next three years, driven by the increasing complexity and AI-driven threat landscape.
  • Cybersquatting, domain-based attacks, and ransomware are the top three global cyber threats in 2024, projected to escalate in the next three years.
  • 87% of CISOs identify AI-powered domain generation algorithms as a direct threat, with 97% voicing concerns about the potential risks associated with granting third-party AI systems access to company data.
  • Only 7% of CISOs express clear confidence in their ability to combat domain attacks, and just 22% believe they have the right tools in place.
  • The human element continues to be the biggest security vulnerability, with internal education and awareness falling behind the sophistication of cybercriminals.
  • Experienced partners can offer vital insights and agility to help organizations stay ahead of the curve.

Statistics:

  • 98% of CISOs expect a surge in cyber attacks over the next three years.
  • 87% of CISOs identify AI-powered domain generation algorithms as a direct threat.
  • 97% of respondents voice concerns about the potential risks associated with granting third-party AI systems access to company data.
  • 7% of CISOs express clear confidence in their ability to combat domain attacks.
  • 22% of respondents believe they have the right tools in place to mitigate domain-based attacks.

Sources:

  • CSC, "CISO Outlook 2025: Navigating Evolving Domain-Based Threats in an Era of AI and Tightening Regulation"
  • CSC, in partnership with Pure Profile, surveyed 300 CISOs, CIOs, and senior IT professionals operating in Europe, the U.K., North America, and Asia Pacific.
  • CSC is the trusted security and threat intelligence provider of choice for the Forbes Global 2000 and the 100 Best Global Brands (Interbrand(R)).
  • Headquartered in Wilmington, Delaware, USA, since 1899, CSC has offices throughout the United States, Canada, Europe, and the Asia-Pacific region.