.png)
Cybersecurity Overview
We provide security services for businesses across industries—from Financial Services and Professional Services to Manufacturing, Retail, and beyond. We help organisations strengthen their defences with proactive cybersecurity solutions, including endpoint protection, identity management, incident response, and cloud security.
Cybersecurity is now a critical business priority. Recent reports show that around 40–45% of UK businesses experience a cyber breach or attack each year, highlighting that no organisation is too small or specialised to be targeted. At the same time, attackers are evolving—using automation, AI-driven techniques, and exploiting human behaviour to gain access.
The threat landscape has shifted significantly. Traditional malware is no longer the primary method of attack. Instead, most cyber intrusions are now malware-free, relying on credential theft, phishing, and social engineering. Once inside, attackers can move rapidly, meaning detection and response speed are more important than ever.
Cyber incidents also carry growing financial and reputational impact. The average global cost of a data breach now exceeds $4.5 million, while smaller organisations can still face significant disruption from downtime, lost data, and regulatory penalties. The true cost often extends far beyond immediate recovery.
At the same time, regulatory requirements and customer expectations are increasing. Strong cybersecurity is no longer just about compliance—it plays a key role in protecting brand reputation, maintaining trust, and enabling secure digital transformation.
However, challenges remain. Many organisations face skills shortages, expanding attack surfaces from hybrid work, and the growing complexity of modern IT environments. With the right governance, monitoring, and strategic support, businesses can reduce risk and build long-term resilience.
Cybersecurity is no longer optional—it is a fundamental part of modern business operations. Organisations that invest in layered security, rapid response, and user awareness will be best positioned to operate securely in an increasingly digital world.
Cybersecurity Trends 2025
Cybersecurity continues to evolve rapidly as organisations defend against increasingly sophisticated threats. In 2025, several key trends are shaping how businesses approach security—focusing on speed, resilience, and AI-driven defence strategies.
1. Malware-Free Attacks Dominate
Traditional malware is no longer the primary entry point. Most cyber intrusions now rely on stolen credentials, phishing, and hands-on activity, making attacks harder to detect and increasing the need for identity-focused security.
2. Attack Speeds Continue to Increase
Attackers are operating faster than ever, with breakout times often measured in minutes rather than hours. This shift is driving adoption of real-time monitoring, automation, and proactive threat detection.
3. Ransomware Evolves
Ransomware attacks are evolving beyond simple encryption. Many now involve data exfiltration, multi-stage extortion, and targeted social engineering, increasing both financial and reputational risk.
4. AI-Powered Threats and Defences
AI is reshaping cybersecurity on both sides. Attackers are using it to automate phishing and create more convincing threats, while defenders use AI for threat detection, anomaly analysis, and automated response.
5. Identity and Access at the Core
Credential theft remains a leading attack vector. Organisations are prioritising multi-factor authentication (MFA), zero-trust architectures, and identity governance to reduce risk—while also addressing challenges such as MFA fatigue attacks.
6. Cloud Security Under Pressure
As more workloads move to the cloud, misconfigurations and credential misuse are becoming major risks. Businesses are investing in cloud security posture management (CSPM) and identity-first security to protect hybrid environments.
7. Regulation and Compliance Expand
Regulatory pressure continues to grow, with frameworks such as GDPR and Cyber Essentials evolving alongside stricter reporting requirements. Compliance is increasingly tied to both risk reduction and customer trust.
8. Skills Shortages Drive Managed Services
The global cybersecurity skills gap remains a major challenge. Many organisations are turning to managed security services, MDR, and outsourced SOC teams to strengthen protection without relying solely on in-house expertise.
Cybersecurity in 2026 is no longer just about prevention—it’s about speed, visibility, and resilience. Organisations that adopt modern security strategies and layered defences will be best positioned to manage evolving threats.
Cybersecurity Statistics
-
Around 40–45% of UK businesses report experiencing a cyber breach or attack each year.
-
The average global cost of a data breach exceeds $4.5 million, continuing to rise annually.
-
Global cybercrime damages are projected to reach over $10 trillion per year by 2025.
-
Most cyberattacks are now malware-free, relying on stolen credentials, phishing, and human error.
-
Human factors contribute to 80–90% of breaches, making user awareness a critical defence layer.
-
Ransomware remains a major threat, accounting for a significant share of global cyber incidents.
-
Phishing continues to be one of the most common attack methods affecting organisations worldwide.
-
Fewer than one-third of organisations regularly test their incident response plans.
-
Credential theft is a leading cause of breaches, particularly in cloud and hybrid environments.
-
Cybersecurity skills shortages persist, with millions of roles unfilled globally.
-
Regulatory pressure is increasing, with organisations adopting frameworks such as Cyber Essentials, ISO 27001, and GDPR.
-
Many businesses are turning to managed security services and MDR to strengthen their cyber defences.
Cybersecurity is no longer a “nice to have”—it is a business-critical investment. From phishing and ransomware to identity-based attacks and cloud vulnerabilities, the scale and sophistication of modern threats require a proactive, layered approach to defence.
When choosing a cybersecurity provider, organisations should prioritise proven frameworks, strong incident response capabilities, and solutions tailored to their industry. See our IT Support & Strategy page for more information.
Case Study: Deepfake Fraud
Background
In 2024, a multinational finance company became the victim of a highly sophisticated cyberattack. Criminals used generative AI to clone the CFO’s voice and video, creating convincing deepfakes that were almost impossible for staff to distinguish from the real person. Over the course of the scam, employees were persuaded to transfer $25.6 million into attacker-controlled accounts.
The company had invested in traditional defences such as email filtering and phishing awareness training. However, this attack bypassed those safeguards by exploiting trust, urgency, and authority — hallmarks of advanced social engineering.
Attack Method
1. AI-Powered Deepfake Fraud
-
Challenge: The attackers needed to overcome the company’s existing multi-level fraud prevention measures, which included financial controls and employee training.
-
Solution: By combining video and audio deepfakes with urgent messaging, attackers were able to trick multiple staff members into believing they were following legitimate CFO instructions.
2. Exploiting Human Factors
-
Challenge: Even well-trained employees can struggle to challenge senior executives in high-pressure situations.
-
Solution: Attackers leveraged social engineering psychology — urgency, authority, and fear of escalation — to push transactions through without proper scrutiny.
Outcomes
❌ Financial Loss: The company transferred $25.6 million to attacker accounts.
❌ Reputational Damage: News coverage highlighted the company’s lack of safeguards against AI-driven threats.
❌ Regulatory Scrutiny: Questions were raised around internal controls and governance.
Conclusion
This case demonstrates how AI-powered social engineering is outpacing traditional defences. Businesses must go beyond awareness training by implementing layered protections such as:
-
Multi-person approvals for high-value transactions
-
Deepfake detection technologies
-
Advanced fraud monitoring tools
The lesson is clear: cybersecurity in 2025 must account for both technical and human vulnerabilities.
Notable Changes in Cybersecurity (2024-2025)
Cybersecurity has evolved rapidly in recent years, shifting from a reactive IT function to a strategic business priority. The following changes highlight how the threat landscape and security approaches have developed between 2024 and 2025.
1. From IT Concern to Boardroom Priority
Cybersecurity is no longer just an operational issue. It is now a core business concern, regularly discussed at leadership level due to its impact on risk, compliance, and organisational resilience.
2. Malware-Free Attacks Become the Majority
Attackers are moving away from traditional malware. Most modern intrusions now rely on stolen credentials, social engineering, and legitimate tools, requiring organisations to focus more on identity and behaviour-based detection.
3. Attack Speeds Increase Dramatically
The time between initial access and lateral movement has shortened significantly. In many cases, attackers can escalate access within minutes, making real-time monitoring and rapid response essential.
4. Ransomware Becomes Multi-Layered
Ransomware attacks have evolved into more complex operations. Many now involve data exfiltration, extortion, and threats of public disclosure, increasing both financial and reputational impact.
5. AI Reshapes the Threat Landscape
AI is now embedded in both cyberattacks and defence strategies. Attackers use it to automate phishing and create more convincing threats, while organisations adopt AI for threat detection, analysis, and response automation.
6. Cloud Security Takes Centre Stage
As cloud adoption grows, so do risks related to misconfiguration and credential misuse. Identity-first security and zero-trust frameworks are becoming essential for protecting cloud and hybrid environments.
7. Compliance and Regulation Tighten
Regulatory requirements continue to tighten. Organisations are strengthening their approach to frameworks such as Cyber Essentials, ISO 27001, and GDPR, with increased focus on reporting, governance, and accountability.
8. Managed Security Services Surge
Ongoing skills shortages are driving demand for managed detection and response (MDR) and outsourced security operations. Businesses are increasingly relying on external expertise to maintain strong security coverage.
In a short period, cybersecurity has shifted from a reactive defence layer to a central pillar of business resilience. Organisations that adapt to these changes will be better equipped to manage risk, maintain trust, and operate securely in a rapidly evolving threat landscape.
How IT Desk stay up-to-date with Cybersecurity Threats
At IT Desk, staying ahead of cyber threats isn’t just something we talk about—it’s built into how we work every day. We know that the security landscape changes by the minute, so keeping pace with the latest risks and defences is critical to protecting our clients.
But our learning doesn’t stop there.
We have a dedicated Information and Security Manager who leads our approach to threat intelligence. He is currently expanding the team in preparation for the launch of SAINT—our brand-new, in-house developed cybersecurity software (more on this coming soon—watch this space). His work goes beyond day-to-day monitoring: he’s constantly engaging with the wider security community, reviewing trusted sources like the NCSC and NIST, and keeping a close eye on specialist security forums.
Professional development is also key. Our security manager regularly attends some of the world’s leading cybersecurity conferences, including SteelCon in Sheffield and DEF CON in Las Vegas, to gain first-hand insight into the latest tools, tactics, and trends being used by both defenders and attackers.
Inside IT Desk, we embed this knowledge into our everyday practices. From internal security briefings and incident response drills to staff awareness training and technical showcases, we make sure our entire team understands the latest threats and how to respond to them.
Our commitment to continuous learning means we don’t just deliver security as a service—we live and breathe it. That’s how we help our clients stay safe, compliant, and resilient in an ever-changing digital world.
IT Desk's Cybersecurity Policies
At IT Desk, security is not an afterthought - it's embedded in everything we do. Our policies are built on globally recognised standards and are regularly reviewed to ensure they reflect the latest threats, technologies, and compliance requirements.
Our Certifications
-
ISO 27001: Demonstrates our commitment to rigorous information security management, covering data protection, access controls, and risk mitigation.
-
ISO 9001: Ensures our processes are quality-driven, consistent, and continuously improving, giving clients confidence that security and service excellence go hand in hand.
Key Policy Areas
-
Access Control & Identity Management
Strict access policies, multi-factor authentication, and a zero-trust framework ensure that only authorised users can access sensitive systems. -
Data Protection & Privacy
Encryption, backup, and retention policies safeguard client data in line with GDPR and other regulatory requirements. -
Incident Response & Business Continuity
Pre-defined incident response procedures and disaster recovery plans minimise downtime and help clients recover quickly in the event of an attack. -
Employee Awareness & Training
Regular training ensures staff understand how to spot phishing attempts, manage credentials securely, and follow best practices. -
Vendor & Supply Chain Security
We vet and monitor third-party providers to ensure they meet the same security standards we uphold internally. -
Continuous Monitoring & Improvement
Threat detection tools, audits, and security reviews keep our defences up to date and aligned with the latest best practices.
Our Approach
Policies alone don’t stop attacks — culture does. At IT Desk, every team member plays a role in maintaining security, from the help desk to senior leadership. By embedding compliance, training, and accountability into our daily operations, we ensure that security isn’t just documented — it’s lived.
Headline Cybersecurity Statistics
-
Around 40–45% of UK businesses report experiencing a cyber breach or attack in the past 12 months.
-
The average cost of a data breach globally exceeds $4.5 million, with costs continuing to rise year-on-year.
-
Global cybercrime damages are projected to reach over $10 trillion annually by 2025, making it one of the largest economic threats worldwide.
-
Nearly 75–80% of cyber intrusions are now malware-free, relying instead on stolen credentials, phishing, or human error.
-
The average breach detection and containment time remains under pressure, with incidents often identified within hours rather than days in mature security environments.
-
Around 80–90% of breaches involve a human element, such as phishing, weak passwords, or credential misuse.
-
Ransomware continues to be a major threat, accounting for a significant proportion of reported cyber incidents globally.
-
Fewer than one-third of organisations regularly test their incident response plans.
-
Phishing remains one of the most common attack methods, impacting a large proportion of businesses each year.
FAQs about Cybersecurity
What is the biggest cybersecurity threat in 2025?
The most common threats in 2025 are phishing attacks, credential theft, and ransomware. Increasingly, attacks are malware-free, meaning criminals use stolen logins or legitimate tools to move inside a network undetected.
How much does a cyber attack cost a business?
In 2025, the average cost of a serious cyber attack for a medium-sized UK business is estimated at £4.3 million. For small businesses, the average cost ranges from £3,398 to £5,001, depending on size and impact. These figures include direct financial losses, recovery expenses, legal fees, and reputatio
How can small businesses protect themselves from cyber attacks?
SMEs should focus on the basics: multi-factor authentication (MFA), regular software patching, strong password policies, staff training, and secure backups. For many smaller firms, outsourcing to a trusted IT security partner ensures enterprise-grade protection without the overhead.
What does “zero trust” mean in cybersecurity?
Zero trust is a security model based on the principle of “never trust, always verify.” Instead of assuming users or devices inside the network are safe, zero trust continuously checks identity, access rights, and device health before granting access.
Is AI making cyber attacks worse?
Yes — criminals are using AI to create deepfakes, realistic phishing emails, and automated attack scripts. At the same time, AI is also helping defenders by powering faster threat detection and automated incident response. AI is now a double-edged sword in cybersecurity.
How quickly should a business detect and respond to an attack?
In 2025, the average breakout time (how quickly attackers spread once inside a network) is just 48 minutes. Businesses need tools that can detect suspicious activity in minutes, not hours, to contain threats before they cause serious damage.
Do cyber criminals target small businesses?
Absolutely. Nearly half of UK businesses reported a cyber attack in the last year, and SMEs are often seen as easier targets because they have fewer in-house defences.
What frameworks or certifications help prove security?
In the UK, widely recognised frameworks include Cyber Essentials, Cyber Essentials Plus, ISO 27001, and sector-specific compliance standards. Achieving these shows customers and regulators that your business takes security seriously.
What should a company do first after a cyber attack?
If you suffer an attack, the priority is to isolate affected systems to stop further spread. Next steps include engaging your IT/security team, notifying affected stakeholders, checking backups, and assessing legal/regulatory reporting obligations. Having a pre-tested incident response plan is essential.
Do I need cyber insurance if I already have strong security?
Yes. Even with the best security in place, no defence is 100% effective. Cyber insurance provides an added layer of protection by covering costs such as legal fees, data recovery, customer notifications, and business interruption. Think of it as a safety net that complements your security measures, not a replacement for them.
Written by:
Steve Harper
Commercial Director
Sources
UK Government, IBM, CrowdStrike, Verizon, Cybersecurity Ventures, Fortinet, World Economic Forum, SentinelOne, National Cyber Security Centre, National Institute of Standards and Technology (NIST)
Relating Insights
