Check Point External Risk Management, has published alarming findings in its “Europe Threat Landscape Report 2024-2025” that deal with the rapid development of cyber threats. The report shows a 333 percent increase in credential theft, increasing supply chain attacks, and the growing impact of AI-powered phishing.
Organisations across Europe and the UK are at increased risk. Drawing on data from the Cyberint Argos Platform, the report analyzes 140,000 cyber threat alerts in critical industries, uncovers significant vulnerabilities and provides strategic guidance for CISOs to combat emerging risks.
Main results
- AI phishing on the rise: A sharp rise in phishing attacks driven by generative AI has led to personalized and more convincing scams, eliminating the need for traditional detection methods.
- Ransomware Evolution: Double and triple extortion ransomware methods are increasingly targeting sensitive sectors, including finance, healthcare, and IT, with AI-enabled malware bypassing advanced defenses.
- Supply chain threat is increasing: A staggering 84 percent of incidents at manufacturers in 2024 were due to supply chain vulnerabilities that highlighted critical vulnerabilities in relationships with third-party vendors.
- Challenges of remote work: Working from home remains a significant risk factor, as unsecured personal devices and home networks have become the main targets for malware and phishing.
Strategic recommendations for CISOs
The report identifies five priority areas where organizations should strengthen their defenses in 2025:
- Using AI-based tools to combat sophisticated phishing and ransomware attacks.
- Strengthen supply chain security through real-time monitoring and supplier assessments.
- Implementing Zero Trust architectures to mitigate risk through hybrid work models.
- Increase investment in endpoint security and secure personal devices.
- Implement rigorous employee training programs to reduce vulnerabilities caused by human error.
Commenting on the report, Marco Eggerling, Global CISO at Check Point Software Technologies, said: “The rise of AI-powered phishing and AI-based ransomware reflects a shift in the threat landscape, where attackers are using modern technologies to exploit vulnerabilities faster and at scale. And as AI redefines both innovation and crime, it’s critical for organizations to adapt their defenses to stay ahead of the curve. Generative AI, for example, has increased the sophistication of phishing and malware attacks, making them almost indistinguishable from legitimate communication. So the same AI innovations that drive greater efficiency and creativity must also be used to fend off these emerging threats. Alongside this, hybrid work models are forcing organizations to strike a balance between enabling flexible work and protecting their extended attack surface. The same applies to the supply chain: With 84 percent of incidents related to security vulnerabilities at manufacturers, connecting business ecosystems is a major challenge.
This report thus highlights the need for companies to review their relationships with third-party providers and invest in solutions that provide greater insight into supply chain risks. Investigating the risk of the fourth party, i.e. companies that a third-party provider commissions in turn, is also becoming increasingly important in view of the increasing risk landscape.”
“For all these reasons, a preventive approach to security and real-time threat monitoring is extremely important, because timely and helpful information has become the cornerstone of effective cybersecurity. They help organizations anticipate and neutralize risks before they become dangerous.”
The Europe Threat Landscape Report 2024-2025 provides organizations with a helpful framework to navigate the cyber threat landscape and prepare for the challenges ahead.
