LevelBlue, a leading provider of managed security services, strategic consulting, and threat intelligence, has unveiled its 2025 Futures Report: Cyber Resilience and Business Impact report.

Building on the insights of the inaugural LevelBlue Futures Report in 2024, this year’s edition explores the characteristics of cyber-resilient organisations, evolving attack vectors, and how business and cybersecurity goals are increasingly intertwined.

AI continues to generate excitement and transformative potential, as organisations are pressing ahead with innovation, despite heightened security concerns. According to the report, only 29% of executives say they are reluctant to implement AI tools and technologies due to cybersecurity risks.

However, while many expect AI-driven attacks to rise, preparation levels remain low. The report found that just 29% of executives feel prepared for AI-powered threats, even though 42% believe such attacks are likely to occur.

Similarly, only 32% of executives believe their organisations are prepared for deepfake attacks, despite 44% expecting them. As AI technologies fuel increasingly sophisticated attack methods, 59% of executives say it is becoming harder for employees to distinguish between real and fake threats.

“In 2025, AI is forcing organisations to pivot once again,” said Theresa Lanowitz, chief evangelist of LevelBlue.

“Our research shows that leaders are becoming more aware of the threats they face, and elevating cyber resilience measures accordingly. However, they still underestimate the potential risk of AI-powered cyberattacks and have extensive work ahead to properly prepare and protect themselves.”

Encouragingly, enterprise alignment and awareness around cyber-resilience have improved significantly over the past year. The report highlights that 45% of executives now view cyber-resilience as a whole company priority, up from 27% last year.

Sixty-six percent of executives report their cybersecurity teams are aligned with business lines, while nearly half (43%) of executives within cyber-resilient organisations say boardroom engagement in resilience discussions is increasing, compared with 37% of executives overall. Moreover, 79% of cyber-resilient organisations say their adaptive cybersecurity strategies allow them to take greater risks with innovation.

Recommended reading

• AI Adoption Stumbles as Report Highlights Employee-leadership Disconnect
• Most Tech Workers and Execs Pretend to Know More About AI Than They Do
• Is AI Now Essential in Recruitment?

The report also sheds light on several critical trends: 48% of organisations recognise they need to improve their defences against AI-powered adversaries, while 41% report facing a significantly higher volume of attacks. Among cyber-resilient leaders, 61% have allocated cybersecurity budgets to new initiatives from the outset, compared to 46% of organisations overall.

Furthermore, 53% of cyber-resilient organisations are making significant investments in advanced threat detection, and 68% say high-profile breach reports have helped elevate cybersecurity as a key concern in the C-suite.

To help organisations navigate this rapidly evolving landscape, the LevelBlue Futures Report recommends four core actions to achieve greater cyber resilience: push cyber-resilience higher up within the organisation, embed cybersecurity responsibilities throughout, adopt a proactive—not reactive—approach, and prioritise resilience across the software supply chain.