AI-powered cyber threats drain security budgets

Issue 1 2025 Information Security

New research highlights a stark reality: IT directors at major global firms are preparing for an unprecedented surge in cyber threats driven by AI, machine learning, and the Metaverse. As cyber criminals deploy increasingly sophisticated attacks, organisations plan significant security budget increases over the next two years.

A global study of IT leaders at companies with over $300 million annual turnover by post-quantum security pioneers Naoris Protocol, highlights the growing urgency to address emerging cybersecurity challenges.

A dangerous nexus for cyberattacks

Over 60% of IT directors strongly agree, and 37% partially agree, that the convergence of the Metaverse and AI will significantly escalate cyberattacks. Hackers are expected to exploit AI and machine learning to create more sophisticated methods, making the Metaverse a prime target.

“The Metaverse, combined with AI-driven hacking, presents a perfect storm of vulnerabilities,” warned David Carvalho, CEO of Naoris Protocol.

The study also highlights heightened cyber risks in the Web3 space. While decentralised technologies offer opportunities, they also bring new threats. Only 35% of IT directors believe their organisations fully understand Web3-related risks, 46% rate their knowledge as ‘quite good’, and 19% report average or poor comprehension. Around 12% say their organisation has an average understanding, while 7% admit to a poor or very poor understanding of the cyber risks posed by Web3.

This knowledge gap could expose critical systems to exploitation as organisations navigate decentralisation and blockchain complexities.

Some of the biggest hacks in 2024 included DMM Bitcoin in May ($305 million) and WazirX in July ($234.9 million). This underscores the growing need to secure mechanisms frequently exploited in hacks, such as private keys. Overall, Web3 security breaches led to cryptocurrency losses exceeding $2.3 billion in 2024, a 31.6% increase compared to 2023, according to blockchain security firm Certik.

Budgets on the rise: A necessary response

Cybersecurity budgets are set to grow significantly as risks rise. Over the past two years, 38% of IT directors reported dramatic budget increases, while 47% saw moderate growth and 15% say it is unchanged.

Looking ahead, 97% expect further increases, with 25% predicting over 50% growth and 61% anticipating increases between 10% and 50% in the next two years.

What will happen to cyber security budgets over the next two years?

● 11% expect increases of up to 10%.

● 35% foresee growth between 10% and 25%.

● 26% predict a 25%-50% rise.

● 15% expect jumps of 50%-75%.

● 10% project budget increases of over 75%.

DePIN: The future of cost-effective cybersecurity

Decentralised Physical Infrastructure Networks (DePINs) are emerging as a promising solution for reducing cyber incidents' financial and operational impacts. According to the study, 32% of IT directors believe adopting DePIN-based cybersecurity measures could significantly reduce costs, while 48% see a moderate impact.

Naoris Protocol’s collaboration with the DePIN Association highlights its dedication to advancing cybersecurity and digital trust through a decentralised, post-quantum approach, benefiting industries like finance, telecommunications, and healthcare.

“The rapid evolution of the cyber threat landscape demands equally agile responses,” Carvalho stated. “Organisations must not only expand their cybersecurity budgets but also embrace innovative technologies like decentralised solutions to stay ahead of attackers




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Security has an identity problem
Access Control & Identity Management Information Security
Cybersecurity discussions have mainly focused on defence, including stronger firewalls, tighter network controls, and better endpoint security. However, in today's world, those traditional defences have become less relevant.

Read more...
Buying more security tools is not building a defence
Information Security
Sophisticated attacks are specifically engineered to bypass individual security tools, and companies absorbing the damage are those who have confused procurement with protection, says Richard Frost from Armata Cyber Security.

Read more...
Modernising ‘smart’ ports
IoT & Automation Information Security Transport (Industry) Logistics (Industry)
A modern port is part of a much larger digital trade ecosystem where all systems need to work together. If one part of that ecosystem is disrupted, the impact can quickly move through the supply chain.

Read more...
Reinventing cybersecurity
NEC XON News & Events Information Security Commercial (Industry)
NEC XON helps a workforce solutions leader reinvent cybersecurity with an AI-enhanced XDR solution to keep pace with increasingly devious cyberattack techniques, including fileless malware, lateral movement, and credential misuse.

Read more...
Hold the line
BlueVision Information Security Editor's Choice
While most businesses are still focused on guarding the wall, the perimeter today has moved to the login screen, according to Christo Coetzer, founder and managing director of BlueVision Technologies.

Read more...
Attackers are turning AI to their advantage
Information Security AI & Data Analytics
ESET's H1 2026 Threat Report analysed around 900 000 AI skills and found more than 3000 to be outright malicious, exposing a fast-growing attack surface for organisations experimenting with AI.

Read more...
BlueVision launches Fusion Cloud
BlueVision Information Security Products & Solutions
Most businesses have moved to the cloud, including Microsoft 365, Azure, AWS and more, and in doing so assume they're protected because they're using a reputable platform; however, the reality is somewhat different.

Read more...
Tools detect threats: Cyber resilience protects businesses
Information Security
If your cybersecurity strategy is built around buying Managed Detection and Response (MDR), deploying an Endpoint Detection and Response (EDR) agent, and calling it ‘done’, then someone has sold you a story, not a strategy.

Read more...
Compressing cyberattack timelines and targeting ungoverned AI identities
Information Security News & Events
Sophos AI Security 2026 report finds attackers are moving beyond experimentation and operationalising AI for attacks using identity as the primary initial access vector, rather than inventing new attack types.

Read more...
Zero-touch automation certificate life cycle management loop
Products & Solutions Information Security Security Services & Risk Management
ManageEngine completes the certificate life cycle management loop with CA-agnostic, zero-touch automation. New post-deployment automation in Key Manager Plus removes the last manual step in certificate renewal as lifespans gradually shrink to 47 days

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.