Thales recently released its 2025 Data Threat Report, illuminating a critical concern for modern organisations: the rapid advancement of artificial intelligence, particularly generative AI. According to the survey conducted by S&P Global Market Intelligence 451 Research, nearly 70% of IT and security professionals from over 3,000 organisations worldwide described this technological evolution as their foremost security worry. This insight underscores a growing awareness of how swiftly AI's integration into business processes can create a precarious security landscape.
The report delineates three primary concerns regarding AI: the speed of development, which was identified as the leading risk by almost seventy percent of participants; issues surrounding AI's integrity (64%); and its trustworthiness (57%). This trepidation reflects the dual nature of AI as both a transformative tool for innovation and a potential vector for threats. While organisations are keen to harness AI's capabilities, they are also becoming increasingly aware of the inherent risks associated with its deployment.
In response to these concerns, investment in security measures tailored specifically for generative AI has surged. Approximately 73% of respondents reported that their organisations are now allocating funds towards AI-specific security tools, marking a significant shift in prioritising security in tandem with technological adoption. Notably, generative AI security has become the second highest spending priority, overtaken only by cloud security—a reflection of the shifting focus within cybersecurity budgets towards emerging technologies.
As organisations struggle to keep pace with the growing AI landscape, Eric Hanselman, Chief Analyst at S&P Global Market Intelligence 451 Research, highlighted the pressures they face. "The fast-evolving GenAI landscape is pressuring enterprises to move quickly, sometimes at the cost of caution," he stated. This sentiment resonates within organisations that are often deploying AI solutions before fully grasping the complexities of their application architectures, which can lead to unintentional vulnerabilities and risks.
In addressing AI-related security challenges, organisations are adopting a multi-faceted approach. Over two-thirds indicated they are procuring security tools directly from their cloud providers, while about three in five are relying on established security vendors. Additionally, nearly half are exploring partnerships with start-ups specialising in this area, demonstrating a willingness to innovate in safeguarding data.
As generative AI continues to reshape operational frameworks, its integration is already well underway. A third of respondents reported that generative AI is either enhancing or transforming their operations. As agentic AI applications—those capable of autonomous decision-making— emerge, ensuring data quality and security is more critical than ever.
However, the threat landscape remains complex and multi-dimensional. Malware has firmly established itself as the most persistent attack vector since 2021, and this year, phishing has surged to become the second most prevalent form of attack, shifting ransomware to the third position. While the overall rates of reported data breaches have modestly decreased from 56% in 2021 to 45% in 2025, the ongoing evolution of cyber threats indicates a persistent need for vigilance.
The nature of cyber threat actors is also shifting, with external sources such as hacktivists and nation-state actors now perceived as the most significant threats. Human error, which previously ranked higher, is now viewed as the third largest contributor to breaches, reflecting a changing awareness of the sources of risk.
Emerging technologies, such as quantum computing, are amplifying security concerns regarding encrypted data. Among surveyed organisations, 63% fear that quantum technologies could one day disrupt current encryption methods, exposing sensitive information. Other concerns include vulnerabilities in encryption key distribution and the "harvest now, decrypt later" risk, where attackers collect encrypted data today for future decryption once quantum computing capabilities advance. In response, half of the organisations are reassessing their encryption strategies, and 60% are either prototyping or evaluating post-quantum cryptography solutions.
Todd Moore, Global Vice President of Data Security Products at Thales, commented on the urgent need for action: "The clock is ticking on post-quantum readiness… even with clear timelines, the pace of encryption change has been slower than expected due to a mix of legacy systems and the complexity of balancing innovation with security." This suggests a critical juncture for organisations: the necessity to proactively refine their security infrastructures against emerging threats while navigating the complexities of integrating new technologies.
The insights from the 2025 Data Threat Report indicate substantial improvements in organisations' overall security postures; however, the pathway ahead demands ongoing adaptation to face the operational challenges posed by emerging technologies like generative AI and quantum computing. As the cyber threat landscape continues to evolve at an unprecedented pace, companies are left with the imperative to balance innovation with robust security measures to protect their systems and sensitive data from an ever-expanding array of risks.
Reference Map
Source: Noah Wire Services