What's driving the recent surge in cybersecurity threats?

There isn’t one cause behind the rise in cyber threats. Several trends are reinforcing each other, making attacks easier to launch and harder for organizations to contain.

Automation and generative AI help criminals produce convincing phishing messages, scan for vulnerable systems, and adapt scams at scale. AI hasn’t made every attacker highly skilled, but it can reduce the time and effort needed to target more people.

At the same time, organizations rely on more cloud services, connected devices, remote access tools, and outside vendors. That creates a larger attack surface. Stolen passwords and weak identity controls can give an attacker a way in without exploiting a dramatic software flaw.

Criminal groups have also refined their business models. Ransomware operators may steal data and threaten to publish it, even if a company can restore its systems from backups. Meanwhile, software supply chains and widely used internet-facing products can expose many organizations when one weakness is found.

Finally, the apparent surge partly reflects better monitoring and more public reporting. The threat is real, but rising incident counts can also mean that more attacks are being detected and disclosed than before. In practice, the biggest risks often come from familiar gaps—unpatched systems, compromised accounts, and overly broad access—rather than a completely new kind of attack.