Exabeam forecasts AI to transform APAC cybersecurity by 2025

Exabeam has shared its cybersecurity predictions for 2025, highlighting key trends anticipated to influence the landscape in the Asia Pacific (APAC) region.

According to Steve Povolny, Senior Director of Security Research & Competitive Intelligence at Exabeam, the creation of malware will become more accessible to those with minimal technical knowledge as AI capabilities expand. "You won't need to be a coder to create sophisticated malware in 2025—AI will do it for you," Povolny explained. AI models designed to produce malicious software are expected to appear in underground markets, enabling individuals to execute complex cyberattacks with little effort. These tools will automate various stages of attack development and deployment, broadening the scope and frequency of threats.

AI will also play a crucial role in enhancing social engineering attacks through the use of deepfakes, Povolny continued. "No longer just a theoretical risk, video-based deepfakes will continue the trajectory to become imperceptible from reality," he noted. This advancement allows criminals to convincingly impersonate others, potentially leading to significant financial fraud by deceiving victims through seemingly credible communications.

Kevin Kirkwood, Chief Information Security Officer at Exabeam, predicts that the conflict between AI-armed attackers and defenders will grow more intense. "Malicious actors will increasingly use generative AI to create morphing malware—code that adapts and mutates to evade detection, making traditional defenses obsolete," Kirkwood stated. In response, security teams will employ AI to improve threat detection efficiency and accuracy, flagging abnormal behaviours with increased speed.

Exabeam forecasts a rise in 'living off the land' attacks, particularly in the context of heightened geopolitical tensions. Kirkwood suggests these attacks, which involve using legitimate tools within networks, will likely become more prevalent as state-based cybercriminals exploit these methods to evade detection. "As geopolitical tensions rise, cybercriminals from nations like Russia, China, and Iran may increase their use of this technique," he added. Organizations, therefore, need to enhance their ability to detect deviations from standard operations.

Gabrielle Hempel, Customer Solutions Engineer at Exabeam, warns of increasing cyberattacks on critical infrastructure. "Large-scale cyberattacks on critical infrastructure—such as power grids, utilities, and healthcare systems—will reach unprecedented levels," Hempel asserted, indicating that such threats pose potential risks to national stability.

The future of cybersecurity employment may see shifts as well. Povolny notes that "AI specialists will make traditional security operations center (SOC) analyst roles obsolete," with AI taking over routine tasks. This change will prompt a greater demand for AI specialists and threat-hunting roles, where human and AI capabilities converge.

The integration of AI in security operations will become more widespread by 2025, according to Steve Wilson, Chief Product Officer at Exabeam. "While AI has become common in tools like SIEM and UEBA, 2025 will see generative AI augmenting nearly every layer of cybersecurity," Wilson explained, urging organizations to adopt AI security certifications and frameworks to meet upcoming regulatory standards.

Wilson further highlighted the role of AI-powered copilots in enhancing defensive measures, predicting their prevalent use among cybersecurity operators by 2025. "On the defensive front, AI copilots will become indispensable in cybersecurity operations, speeding up threat detection, investigation, and response," he said.

Addressing the cybersecurity talent shortage, particularly in the Asia Pacific, Gareth Cox, Vice President of Asia Pacific & Japan at Exabeam, sees AI-powered copilots as a solution. These can help "bridge the talent gap," Cox suggested, by automating routine tasks and providing insights that make cybersecurity roles more accessible to a broader workforce.

The approach to managing AI-driven disinformation and cyberattacks during the upcoming election season will be another challenge for Asia, Exabeam suggests. With several nations in the region preparing for elections, there is heightened concern about AI being used to spread misinformation and interfere with electoral processes. Exabeam outlines strategies such as mapping defences using the MITRE ATT&CK framework to help combat these threats.