Jason Merrick, SVP of Product at Tenable
Everything, everywhere, all at once is not sustainable without context
“As the attack surface continues to expand and threat actors grow more sophisticated, cybersecurity teams will face an overwhelming flood of fragmented vulnerability and threat intelligence data. The days of linear attacks are fading, giving rise to multifaceted, rapid incursions that exploit numerous entry points. In this increasingly chaotic landscape, the inability to remediate everything, everywhere, all at once will make context king. Organisations that prioritise understanding the greatest risk to their business and the most critical vulnerabilities will win. This contextual approach will redefine vulnerability management, enabling cybersecurity teams to act strategically, swiftly, and with greater precision to mitigate threats effectively.”
Bob Huber, CSO and Head of Research at Tenable
AI adoption will outpace our ability to get educated on it and secure it
“By 2025, AI adoption will likely have already outpaced our ability to educate users and secure these rapidly evolving technologies fully. As organisations prioritise efficiency and return on investment, the adoption of technologies like AI and cloud continues to surge. However, this swift evolution presents a critical challenge: the knowledge gap. Many users and organisations are struggling to keep pace with the education and training needed to comprehensively understand and protect these technologies. This creates a pressing dilemma—how can we safeguard innovations like AI and cloud when their complexity and growth outstrip our readiness? The challenge for CISOs lies in striking a balance between driving forward technological adoption and ensuring the security and resilience of these tools. Bridging this gap sooner rather than later will be critical for organisations.”
Liat Hayun, VP of product and research, Tenable Cloud Security
Multicloud Security Will Dominate as CISOs Embrace Multi-Vendor Platforms
“Multicloud strategies will become the standard in 2025. Enterprises will become increasingly wary of ‘putting all their eggs’ in one cloud service provider basket due to the centralised risk that a single cloud service provider poses. As a result, more and more CISOs will start to prioritise multi-vendor security platforms to ensure consistent protection across diverse environments (i.e., meeting compliance requirements and securely scaling AI-driven workloads).”
