Editor’s Note: This article was originally published in November 2024. It was updated in August 2026 with the outcome of each prediction.
Nearly two years later, AI got nine of its 19 cybersecurity predictions right, eight partly right and two wrong.
In November 2024, we asked ChatGPT to predict the cybersecurity challenges network managers were likely to face in 2025, then cross-checked and expanded those predictions with Gemini and Claude. The resulting list focused on AI-driven threats, quantum-resistant security, the expanding attack surface of hybrid and cloud environments, zero-trust architectures, automation and advanced threat intelligence. This article preserves those original predictions and now includes August 2026 updates showing what happened.
AI-powered threats against network defenses
November 2024 prediction: Attackers will deploy advanced AI tools to evade traditional network defenses, using adaptive malware to bypass intrusion detection systems and crafting hyper-realistic phishing attacks. Network teams will need AI-enhanced monitoring and response tools to counteract these evolving threats effectively.
August 2026 update: This prediction was accurate. In 2025, the FBI received 22,364 complaints involving AI-related information, with reported losses of more than $893 million. The FBI documented AI being used for business email compromise, voice cloning, romance scams and employment fraud, showing that generative AI had moved from a theoretical advantage for attackers to a routine part of cyber-enabled crime.
Quantum-resistant security measures
November 2024 prediction: The advent of quantum computing will begin challenging existing encryption methods. Network managers should prioritize transitioning to quantum-safe cryptographic algorithms and ensure their hardware and protocols are future-proofed against quantum threats.
August 2026 update: The transition happened, but not because quantum computers began breaking current encryption. In March 2025, NIST selected HQC as an additional post-quantum encryption algorithm and again urged organizations to migrate to the quantum-resistant standards finalized in 2024. By 2026, post-quantum cryptography is being incorporated into core technologies and protocols.
Expanded attack surface in multi-cloud environments
November 2024 prediction: The growing reliance on multi-cloud architectures will amplify risks as attackers exploit misconfigured cloud setups. Zero-trust models and cross-cloud threat monitoring will become indispensable for securing workloads distributed across providers.
August 2026 update: This prediction was accurate. Cloud attacks continued to expose the cost of excessive permissions, exposed credentials and incomplete monitoring. Palo Alto Networks’ 2025 incident-response data found identity and access management problems in nearly half of cloud-related incidents, including cases where attackers used overly privileged accounts to escalate access and exfiltrate data.
Supply chain attacks targeting software and hardware
November 2024 prediction: Attackers will continue targeting vulnerabilities in third-party software, firmware, and network hardware updates. Rigorous vendor vetting, patch validation, and secure firmware update processes will be critical to protect against these risks.
August 2026 update: This prediction was accurate. Software supply-chain attacks remained a serious problem in 2025, with compromised packages and developer infrastructure giving attackers a route into multiple downstream organizations at once. The Shai-Hulud campaign, disclosed in 2025, compromised hundreds of npm packages and targeted cloud credentials and GitHub tokens.
Zero-trust becomes a standard approach
November 2024 prediction: Implementing zero-trust architectures will evolve beyond buzzwords to a practical necessity. This includes micro-segmentation, continuous authentication, and least-privilege access policies to minimize attack surfaces and prevent lateral movement within networks.
August 2026 update: This was directionally accurate, although zero trust did not become universal in 2025. Organizations continued replacing broad network trust with identity-based access, least privilege and ZTNA, but implementation remained uneven and often covered only part of an organization’s environment.
IoT and edge networks under fire
November 2024 prediction: The proliferation of IoT devices and edge computing nodes will create a surge of unmanaged endpoints vulnerable to attacks. Network managers must implement segmentation, real-time anomaly detection, and strict device access policies to contain potential breaches.
August 2026 update: This prediction was accurate. In June 2025, the FBI warned that the BADBOX 2.0 botnet had compromised millions of internet-connected devices, including streaming devices, projectors and vehicle infotainment systems. Compromised devices were being used as residential proxies and infrastructure for other criminal activity.
Ransomware resilience at the network level
November 2024 prediction: Sophisticated ransomware campaigns will focus on lateral movement and encryption of critical infrastructure. Advanced EDR (endpoint detection and response) combined with NDR (network detection and response) will be essential for identifying and mitigating these threats early.
August 2026 update: Ransomware remained a major network threat throughout 2025. The FBI received 3,611 ransomware complaints and identified 63 new ransomware variants during the year. The incidents continued to depend on network discovery, privilege escalation and lateral movement after initial access, keeping segmentation, monitoring and rapid containment central to ransomware defense.
Network automation introduces new vulnerabilities
November 2024 prediction: While automation streamlines network operations, attackers may exploit configuration scripts, API endpoints, or orchestration tools. Implementing secure DevOps practices, robust audit trails and continuous validation of automated processes will mitigate these risks.
August 2026 update: The underlying concern proved valid, although network automation itself did not emerge as a dominant attack category in 2025. The larger problem became the APIs, credentials and privileges that automated systems depend on. NIST published additional API protection guidance in 2025 and 2026 as highly connected and automated infrastructure created larger consequences when access controls failed.
Hybrid workplace security overhaul
November 2024 prediction: As hybrid work models persist, network managers will adopt modern secure access strategies such as zero-trust network access (ZTNA) and Secure Access Service Edge (SASE) to ensure secure connectivity for remote users.
August 2026 update: This prediction was accurate. Hybrid work remained established, and security architecture continued moving away from traditional VPN and perimeter models. In 2026, permanent hybrid work and cloud adoption continue to drive deployment of ZTNA, security service edge and SASE platforms.
Critical focus on secure DNS
November 2024 prediction: DNS-layer threats, including cache poisoning and DNS tunneling, will grow in sophistication. Enforcing secure DNS practices, such as DNSSEC and real-time query monitoring, will be vital to block malicious traffic and maintain network integrity.
August 2026 update: DNS remained an important security control, but this prediction overstated how prominent DNS-specific attacks would become in 2025. DNS tunneling, malicious domains and DNS-based detection remained operational concerns, but secure DNS did not emerge as one of the year’s defining changes in network security.
Visibility into encrypted traffic becomes essential
November 2024 prediction: With encryption becoming the default, maintaining visibility into encrypted traffic without compromising privacy will be a significant challenge. Decryption proxies and AI-driven analytics will be pivotal in securing encrypted traffic streams.
August 2026 update: The visibility problem was real, but the response was broader than this prediction suggested. Attackers increasingly operated through legitimate services and encrypted sessions, while defenders relied on endpoint, identity, DNS, flow and behavioral telemetry rather than attempting to decrypt every connection.
Cybersecurity compliance pressures intensify
November 2024 prediction: Network teams will face stricter regulatory demands, from GDPR and CCPA to new sector-specific mandates. Automated compliance reporting, enhanced logging, and secure storage of audit trails will become critical components of regulatory adherence.
August 2026 update: This prediction was only partly accurate in the U.S. Regulatory obligations remained substantial, but the direction was not uniformly toward more rules. In June 2025, the SEC withdrew several proposed regulations, including proposed cybersecurity risk-management requirements for investment advisers, registered investment companies and business development companies.
Proactive threat hunting gains momentum
November 2024 prediction: Reactive responses will give way to proactive threat-hunting strategies. Behavioral analytics, honeypots, and advanced anomaly detection will enable network managers to uncover and neutralize potential threats before they escalate.
August 2026 update: This prediction was accurate. Threat hunting became particularly important for finding attackers that had established persistent access to network infrastructure. In August 2025, CISA and international partners specifically called for threat hunting after documenting Chinese state-sponsored actors compromising routers and networks worldwide as part of a long-term espionage campaign.
SASE becomes the new normal
November 2024 prediction: Secure Access Service Edge (SASE) will transition from an emerging concept to a widely adopted standard. By unifying network and security-as-a-service models, SASE will streamline operations and enhance organizational defenses.
August 2026 update: This prediction was directionally correct, but it did not fully materialize during 2025. SASE adoption continued to grow, and Gartner projected strong market growth through 2028, driven by hybrid work, multicloud adoption and cloud-based security. By 2026, SASE is mainstream, but it has not become the universal standard yet.
5G and network slicing security challenges
November 2024 prediction: The rollout of 5G networks will create unique vulnerabilities, particularly in network slicing. Strong encryption, granular access controls, and advanced threat detection systems will be critical to securing these dynamic network environments.
August 2026 update: This did not become the major 2025 security issue the prediction suggested. Security agencies continue working on 5G and network-slicing protections, and NIST published additional 5G platform-security guidance in 2026, but widespread real-world attacks exploiting network slicing have not emerged as a defining enterprise threat.
Biometric authentication under scrutiny
November 2024 prediction: Biometric authentication will see increased adoption, but securing biometric data will become a priority. Breaches of this immutable data type will push network managers to implement stricter protections and data anonymization techniques.
August 2026 update: This prediction was accurate, although the pressure came increasingly from AI-generated media rather than conventional biometric database breaches. NIST’s 2025 Digital Identity Guidelines added specific controls for forged media, deepfakes and injection attacks designed to defeat biometric and remote identity-proofing systems.
Emerging AI and ethical considerations
November 2024 prediction: As AI becomes more integrated into cybersecurity tools, organizations will need governance frameworks to address biases, ethical risks, and transparency. Regular algorithm audits and clear guidelines for AI use will enhance trust and efficacy.
August 2026 update: AI governance became more formal, but the focus shifted quickly from broad ethical questions toward operational security. In March 2025, NIST published an expanded taxonomy of adversarial machine-learning attacks covering evasion, poisoning, privacy attacks and misuse of generative AI. In 2026, securing AI systems has become a distinct cybersecurity discipline rather than simply a governance issue.
Geopolitical risks reshape network strategies
November 2024 prediction: Cybersecurity will increasingly intersect with geopolitical conflicts, with state-sponsored campaigns targeting critical infrastructure and multinational networks. Organizations must prepare for adaptive security responses to these evolving threats.
August 2026 update: This prediction was accurate. In August 2025, CISA and international partners disclosed a Chinese state-sponsored campaign targeting telecommunications, government, transportation and other networks worldwide. Attackers compromised backbone, provider-edge and customer-edge routers and maintained persistent access to support a global espionage operation.
Privacy-preserving technologies in network security
November 2024 prediction: Privacy-enhancing technologies, such as confidential computing and decentralized identity management, will emerge as key tools. These methods will enable secure data processing without compromising sensitive information, aligning with privacy regulations and user expectations.
August 2026 update: The technology advanced, but adoption was slower than this prediction implied. In March 2025, NIST finalized guidance for evaluating differential privacy. In May 2026, NIST published draft guidance for confidential computing that protects cloud data while it is being processed, including AI workloads. Privacy-preserving technologies moved closer to practical deployment without becoming a standard network-security layer.
Looking back from August 2026, most of the predictions held up. AI-assisted attacks, ransomware, cloud exposure, zero-trust adoption, hybrid-work security and geopolitical pressure all became more important. SASE, post-quantum security and privacy-preserving technologies advanced, but more slowly than predicted. 5G network-slicing threats and secure DNS were less prominent than expected. The biggest misses were mostly about timing, not direction.
About NetworkTigers
NetworkTigers is the leader in the secondary market for Grade A, seller-refurbished networking equipment. Founded in January 1996 as Andover Consulting Group, which built and re-architected data centers for Fortune 500 firms, NetworkTigers provides consulting and network equipment to global governmental agencies, Fortune 2000, and healthcare companies. www.networktigers.com.
