Cyber security in 2025: What we learned and how to stay ahead in 2026
Blog|by Leanne Bevan|22 December 2025

Why human factors, AI, and compliance will define the next era of cyber defence
2025 was a turning point for cyber security. From headline-grabbing breaches to the rise of AI-driven attacks, businesses faced unprecedented challenges. So, what can you learn - and how can you prepare for what’s coming?
We recently hosted a panel webinar that discussed just that. Watch the recording for the full insights and discussion, and hear from experts from Sophos and KnowBe4.
Don’t have time to watch the full recording? Take a look at the key takeaways below.
Key lessons from 2025
- Technology alone isn’t enough - People, processes, and preparation matter just as much.
- Social engineering is the attacker’s weapon of choice - Human behaviour is the biggest vulnerability.
- AI is a double-edged sword - It’s powering both defence and attack.
- Speed is critical - Rapid detection and response can make or break your recovery.
- Compliance is tightening - Frameworks now demand regular, meaningful security training.
- Emerging risks are here - Deepfakes, shadow AI tools, and multi-channel attacks will dominate 2026.
Why people are the weakest link
Cybercriminals exploit human nature - urgency, trust, and routine. They target new hires, mimic senior leaders, and time attacks for when employees are least alert. It’s easier to trick someone into handing over access than to break through hardened systems.
AI: Friend and foe
Attackers use AI to craft convincing phishing campaigns and automate reconnaissance. Defenders use it to detect anomalies and accelerate incident response. But AI isn’t a silver bullet - you still need skilled analysts and robust processes.
Compliance and training: no Longer optional
Frameworks like Cyber Essentials, ISO, PCI DSS, and DORA now require ongoing training and phishing simulations. Staying compliant protects your reputation and reduces risk.
Looking ahead to 2026
- Multi-channel attacks across email, SMS, Teams, Slack, and LinkedIn.
- Supply chain vulnerabilities targeting smaller vendors.
- Deepfakes and voice impersonation making fraud harder to detect.
- Shadow AI tools creating uncontrolled data exposure.
Ready to strengthen your cyber security posture?
- Explore our cyber security solutions.
- Book your free Seven Layers of Security Assessment.
- Access expert guidance from our dedicated cyber security team – fill in the contact form to book a meeting.
Contact Grey Matter
If you have any questions or want some extra information, complete the form below and one of the team will be in touch ASAP. If you have a specific use case, please let us know and we'll help you find the right solution faster.
By submitting this form you are agreeing to our Privacy Policy and Website Terms of Use.
Related News
Be more productive: Microsoft 365 + Copilot
Undoubtedly, your team will be using AI in one form or another, whether it be for research, drafting emails, putting together PowerPoints, or collating data in Excel. But unless you’ve got oversight of the AI they’re using, their tools may be ineffective at best or even putting...
New changes to Visual Studio benefits: What you need to know
Microsoft is replacing legacy Visual Studio partner benefits with Visual Studio Enterprise Lite – and it’s going to change how your team access credits, licences, and tooling. What’s changing with Visual Studio Lite? From the introduction of Visual Studio Lite on 13 February 2026, you’ll no...
Strengthen your Microsoft Defender strategy with Sophos MDR
Cyber attackers aren’t slowing down – and they’re certainly not getting less sophisticated. Even with strong protections like Microsoft Defender in place, today’s human‑led attacks continue to slip through automated defences. That’s why more organisations are choosing to strengthen Microsoft...
The complete guide to the JetBrains AI ecosystem
AI is no longer a nice-to-have for development teams. It’s reshaping how you write, test and maintain code every day. JetBrains is one of the vendors pushing that shift furthest – and doing it directly inside the tools you already trust. JetBrains has evolved far beyond their productivity helpers like...