2024 will be a big year for cybersecurity

A cybersecurity expert predicts 2024 will be a big year for cybersecurity as the world integrates some key tech.

NordLayer’s Carlos Salas said that in 2024, we will see such trends as the growth of remote work, human firewalls, the impact of AI, and the demand for cybersecurity specialists.

He said: “Besides standard cybersecurity topics like the seriousness of ransomware attacks, data leaks, and emerging business exploitation apps, from expert knowledge sharing and conversations with clients, we predict what other topics will keep businesses on edge next year.”

Research on the US workforce revealed that 40 per cent of the workforce capable of working remotely has moved from working full-time on-site to either a hybrid or fully remote work arrangement between 2019 and 2023.

Salas said that in 2024 this trend will likely remain the same because employees are more likely to sacrifice higher salaries for better and more flexible working conditions. As businesses increasingly embrace flexible work models, the traditional perimeter-based cybersecurity approaches are becoming less effective. A hybrid working environment makes the company’s network perimeter more vulnerable.

“Technologies like VPNs, secure login methods, and access controls are necessary to ensure cybersecurity no matter where employees operate,” Salas said.

While technological solutions are crucial in cybersecurity, the human element remains a significant vulnerability. Since humans are usually the weakest link in the business cybersecurity chain, the cybersecurity world can expect to see increased investments in creating a resilient human firewall.

Salas said that cybersecurity awareness and education will be a priority for individuals and organisations as the cyber threat landscape becomes more complex and diverse.

Organisations will educate employees about the latest phishing techniques, social engineering tactics, and the importance of adhering to security policies. Simulated phishing exercises, cybersecurity workshops, and continuous training will become integral to corporate cybersecurity strategies. Businesses can significantly enhance their overall security posture by empowering employees to recognise and respond to potential threats.

He said that AI threats will continue to pose even bigger business risks. With the rapid advancements in machine learning algorithms and AI technologies, cybercriminals are finding new ways to exploit vulnerabilities and breach data security.

Salas said that hackers will automate their attacks and target numerous firms using AI algorithms. Additionally, attackers might create even more convincing social engineering attacks using widely available AI technologies, such as AI-powered chatbots. The blurred language barrier will make phishing attacks harder to detect for employees and more broadly spreadable.

Meanwhile, the security industry will face a shortage of cybersecurity talent. As technology advances, the demand for skilled cybersecurity professionals is increasing exponentially.

Salas said that despite the cybersecurity workforce expanding by almost 10 per cent in the past year, the need for more workers keeps growing.

This means that in 2023, around 4 million cybersecurity positions need to be filled. The research shows that two-thirds of the experts polled said their company lacks the cybersecurity personnel necessary to detect and resolve security problems.

Budget cuts, layoffs, and limits on recruiting and promotions are responsible for the lack of talent. The constantly changing nature of cyber risks makes it hard for companies to find specialists with the required knowledge.

Cloud security evolution will be a key challenge and opportunity for cybersecurity as the cloud becomes the dominant platform for data storage, processing, and delivery. The cloud offers scalability, flexibility, and cost-efficiency, thus creating an appealing cybersecurity model for businesses.

It is no surprise that, according to a study, cloud technologies are positively associated with performance gains of US public firms in the last decade. Cloud security refers to the continuous improvement and innovation of cloud security practices and technologies to address the evolving threats and requirements of the cloud environment. For example, zero-trust tools will become the norm for cybersecurity as organisations adopt a more granular and dynamic cloud approach to controlling access to their resources and data, Salas said.