TESTIMONIALS

“Received the latest edition of Professional Security Magazine, once again a very enjoyable magazine to read, interesting content keeps me reading from front to back. Keep up the good work on such an informative magazine.”

Graham Penn
ALL TESTIMONIALS
FIND A BUSINESS

Would you like your business to be added to this list?

ADD LISTING
FEATURED COMPANY
Case Studies

WEF on changing global cyber risk landscape

by Mark Rowe

Artificial intelligence, geopolitical fragmentation and a surge in cyber-enabled fraud are behind the changing global cyber risk landscape at unprecedented speed, according to the World Economic Forum’s Global Cybersecurity Outlook 2026.

The report, developed with the consulting firm Accenture, suggests that cyber-enabled fraud has become a pervasive threat. Supply chains remain a major systemic vulnerability. Among large companies, most, 65pc cite third-party and supply chain risks as their greatest cyber resilience barrier, up from 54pc last year. This shift underscores the growing societal and economic impact of fraud as it spreads across regions and sectors, according to the report. It shows how AI is supercharging both offensive and defensive capabilities. Geopolitical fragmentation further compounds these risks, reshaping cybersecurity strategies and widening preparedness gaps across regions.

This year marks the fifth edition of the Global Cybersecurity Outlook series, which has traced from pandemic-driven digitalization to an increasingly complex cybersecurity landscape. The new findings point to a cyber landscape undergoing profound structural shifts, where cyber resilience can no longer be approached as a technical function alone but as a strategic requirement that underpins economic stability, national resilience and public trust. Cyber inequity is widening across regions and sectors. Smaller businesses are twice as likely to report insufficient resilience compared to large firms.

What they say

Jeremy Jurgens, Managing Director isWorld Economic Forum (WEF), the Swiss gathering of the rich and powerful each January in the resort of Davos. He said: “As cyber risks become more interconnected and consequential, cyber-enabled fraud has emerged as one of the most disruptive forces in the digital economy, undermining trust, distorting markets and directly affecting people’s lives. The challenge for leaders is no longer just understanding the threat but acting collectively to stay ahead of it. Building meaningful cyber resilience will require coordinated action across governments, businesses and technology providers to protect trust and stability in an increasingly AI-driven world.”

And Paolo Dal Cin, global lead, Accenture Cybersecurity said: “The weaponization of AI, persistent geopolitical friction and systemic supply chain risks are upending traditional cyber defences. For C-suite leaders, the imperative is clear; they must pivot from traditional cyber protection to cyber defence powered by advanced and agentic AI to be resilient against AI-driven threat actors. True business resilience is built by fusing cyber strategy, operational continuity and foundational trust—enabling organizations to swiftly adapt to the dynamic threat landscape.”

 

Comments

Geopolitical cyber risk is increasingly realised through supply chains rather than direct attacks, said Rob Demain, CEO of the consultancy e2e-assure. He said: “Even organisations with strong internal security can be exposed through software providers, managed services or operational technology partners operating in different jurisdictions. This is particularly relevant in the UK, where complex supply chains support everything from public services to manufacturing and energy. As a result, cyber resilience is becoming an ecosystem challenge, not an organisational one. Continuous monitoring and shared visibility across third-party environments are now essential to understanding where real risk sits and responding before disruption cascades.
“This change is being reflected in regulatory updates. In the UK the upcoming Cyber Security and Resilience Bill aims to bring supply chains under more regulation and limit supply chain risk, including the technologies and utilities that are integral to critical business operations.”
Focus on causes
Javvad Malik, lead CISO advisor at the platform KnowBe4, said that the report reveals a significant shift in cybersecurity priorities, with cyber-enabled fraud and phishing now surpassing ransomware as the top concern for CEOs.  “However, there is some nuance here, as ransomware is often delivered via phishing or other forms of social engineering. Focusing on these root causes makes more sense, as addressing them can block the path for a variety of cyberattacks.  There also appears to be a divergence in priorities between the boardroom and security operations. While CEOs focus more on financial loss prevention and emerging threats, CISOs remain primarily concerned with operational resilience against ransomware attacks and supply chain disruptions.”
And Dan Lattimer, Area VP EMEA West, at the cyber firm Semperis said: “Disruption attributable to geopolitically motivated cyberattacks is a top concern identified in the annual World Economic Forum Cyber Report, with 64 per cent factoring in disruption associated with CNI, for example, into their cyber risk mitigation strategies. This could be influenced by the fact that only 40pc of European companies are confident in the ability of their government to respond to an attack against, yet the vast majority believe their business has sufficient cyber resilience.
This is a classic case of reality differing from perception. Yes, governments do need to step up and improve their threat detection and response to CNI, which is why the [UK’s] Cyber Security and Resilience Bill is so urgently needed as an update to NIS [EU’s network and information systems directive], but companies too need to take a reality check. To be truly resilient, these businesses need to understand what constitutes their Minimum Viable Company (MVC) – that is the failover strategies, data recovery and minimum viable operations of the business  – all of which are key pillars of resilience that enable the company to continue or quickly regain their core operations. Very few organisations are in such a position today and so most would do well to focus on MVC as part of their drive to achieve resilience.”

Visit www.weforum.org.

Related News