"Next Year’s DDoS Attack Scale to Increase... Expansion of National Cyber Warfare Expected"

Security specialist company ESTsecurity announced on the 24th the top 5 major security issues of 2024 and the top 5 security threat forecasts for 2025.

First, the major security threat forecast for 2025 is the increase in scale and sophistication of Distributed Denial of Service (DDoS) attacks. It is expected that VM botnet DDoS attack methods using virtual machines (VM) or containers, which are more efficient and powerful than existing Internet of Things (IoT) botnets, will increase. By integrating artificial intelligence (AI) technology, attacks will become more sophisticated and intelligent by automatically creating VMs or containers in cloud environments and dynamically adjusting and distributing traffic. In particular, it is anticipated that attacks will frequently occur globally in conjunction with unstable international situations.

Top 5 Security Threats Forecast for 2025. Provided by ESTsecurity

The second security threat is the potential expansion of state-sponsored cyber warfare. Conflicts between countries are expected to continue in 2025, and there is a possibility that state-sponsored cyber attacks will further expand and spread.

The third is the potential surge in attacks aimed at cryptocurrency theft. As cryptocurrency prices soar, hacking attacks targeting cryptocurrency theft for financial gain are expected to increase. Along with continued attacks by malware such as ransomware and miners aimed at cryptocurrency theft, attacks targeting cryptocurrency exchanges and personal information collection attacks aimed at stealing exchange accounts or personal wallets may also increase.

Fourth, as companies adopting multi- and hybrid-cloud strategies become more common, the importance of cloud security is also expected to grow. Multi- and hybrid-cloud environments use multiple platforms, making security configuration challenging, and in some cases, the attack surface may expand, thereby strengthening the importance of cloud security.

Finally, many companies are expected to introduce generative AI services to improve work efficiency. Accordingly, the importance of generative AI security is expected to emerge due to the increased risk of internal confidential information or personal data leakage caused by user negligence.

Meanwhile, the major security issues of 2024 were identified as ▲continued supply chain attacks ▲significant changes in the ransomware ecosystem ▲escalation of conflicts between countries into cyber warfare ▲evolution of North Korean hacking groups’ attack methods ▲increase in attacks utilizing AI.