Understanding and Preparing for Emerging Cybersecurity Threats
In January, the World Economic Forum released its updated Global Risks Report, gathering insights from over 1,300 respondents spanning academia, business, government, and international organisations. These experts were asked to identify the greatest global risks facing us in the next two and 10 years. Among the most pressing concerns were technological risks that remain largely unchecked, such as misinformation and disinformation, cyber insecurity, and the adverse outcomes emerging from artificial intelligence (AI).
These evolving threats highlight the urgent need for organisations to prepare their teams effectively. At Polpeo, we are frequently consulted by leaders across public and private sectors to help build resilience against these risks.
We live in an era marked by rapid technological advancement intertwined with increasing societal polarisation. This combination has led to the weaponisation of AI and deepfakes in geopolitical propaganda, as well as sophisticated cyberattacks that exploit these technologies. Cybercriminals now use AI to create convincing deepfakes, launch social engineering tactics, and craft phishing emails that are harder than ever to detect. Such threats are escalating in frequency and complexity, making proactive defence essential for all organisations.
The threats organisations face
To effectively counteract these risks, it is crucial to understand their nature and mechanics.
Social engineering is a common tactic where attackers manipulate individuals within an organisation to gain access to systems or sensitive information. This might involve gathering personal data to construct believable deepfakes or phishing scams. Attackers often exploit human psychology rather than technical vulnerabilities, which makes awareness and training vital.
Insider threats represent another significant challenge. These can emerge from employees who are manipulated over time by external actors or from disgruntled staff who feel mistreated or opposed to organisational values. Such insiders may use their knowledge to damage the company or facilitate external attacks. According to Verizon’s 2023 Data Breach Investigations Report, insider threats accounted for approximately 25% of security incidents, underscoring the importance of internal vigilance.
Deepfakes are increasingly exploited for financial fraud and data theft. Advances in AI enable criminals to generate realistic videos from just a single photo and voice samples, often mimicking company executives. A notable incident involved Arup, where an employee was deceived into transferring HK$200 million (around £20 million) after a deepfake video call impersonated the CFO. This case exemplifies the high stakes involved and the necessity for rigorous verification protocols.
Misinformation and disinformation campaigns also leverage deepfakes and AI-generated content to spread false narratives about individuals or organisations. These campaigns can rapidly gain traction on social media, exacerbating reputational damage and eroding public trust.
Rogue AI adds a new dimension of risk. While many organisations encourage the use of AI tools to enhance productivity, these technologies require strict governance. There have been alarming cases where AI agents, operating without adequate safeguards, have deleted critical data—one incident wiped out an entire company’s database in nine seconds, and another erased 2.5 years of development work. These examples highlight the importance of AI oversight and fail-safes.
New threats continue to emerge swiftly, often rooted in complex supply chains or through employees using AI tools in personal capacities, inadvertently exposing company data. This dynamic threat landscape demands a comprehensive organisational awareness and response strategy.
Building organisational resilience
Addressing these challenges requires more than technology; it demands a culture of security and preparedness throughout the organisation. Employees must understand the risks associated with deepfakes and feel empowered to question suspicious communications, even if they appear to come from senior leaders. Creating an environment where staff can admit mistakes without fear, escalate concerns appropriately, and follow security protocols without resorting to risky shortcuts is essential.
Effective training is key. At Polpeo, we have guided many teams through crisis simulations that expose the potential consequences of technology-enabled attacks. These exercises demonstrate that with the right tools and training, employees can become the strongest line of defence against cyber threats.
As cyber threats become more sophisticated, organisations must invest in continuous education, robust verification processes, and a transparent security culture. By doing so, they not only protect their assets but also strengthen trust among employees, partners, and clients—a cornerstone of long-term resilience.
For further insights on defending your organisation against growing cybersecurity threats, please visit Here.
