Cyber crime is on the rise, as several new studies show cyberattacks are a national and international threat to countries, businesses, and private citizens. 

From ransomware and social media hacks to full on crypto-warfare, the need for robust cybersecurity has never been more dire. Businesses are looking for guidance on how to brace themselves for the increasing risks of the digital era. 

SCC Cyber’s  data shows a 300% increase in searches for ‘how can ransomware be prevented’ over the last three months. Meanwhile, concerns over ‘IoT hacking’ have risen by 125% since August, and searches for ‘cyber security legislation’ have increased by 133% year on year. 

Paul Allen, practice director at the IT managed solutions company SCC Cyber, identified the top six trends in cybersecurity to keep an eye on for 2023. 

1 – People

The number one trend SCC cyber identified as being crucial in 2023 are people. This is amid the drastic gap in the cybersecurity workforce demand and supply. 

Even though the cybersecurity workforce is at an all time high, about 3.4 million more workers are needed to meet the global demand for this growing industry. 

Skilled staff need to be won, retained, and listened to, Allen advises, as skilled cyber workers can pick and choose the companies they work for. 

While AI and Machine Learning (ML) are huge in cybersecurity, they are also the tools of attackers – skilled people can therefore make all the difference in shoring up cyber defences. 

Investing and developing a team of strongly skilled people will enable internal growth and development, the advice report states. 

2 – Ransomware / Extortion 

Ransomware and extortion were major threats in 2022 – and it appears the latter is on the rise. 

Extortion is essentially ransomware without encryption, making it easier for attackers to extort money for people’s personal information with less time and effort. 

Ransomware has been identified as the ‘most acute threat’ facing the UK’s cybersecurity, in a report by the NCSC. 

Allen calls for a ‘structured and consistent approach’ to mitigate these cyberattacks. A ‘maturity plan’ is essential to ensure cybersecurity amid this growing threat. 

Staff training, as well as auditing email security, backups, and internal governance to ensure the confidentiality of data is integral to this planning. 

3 – Artificial Intelligence and Machine Learning

While Allen notes that AI and ML can be game changing in a sector with a staff supply shortage, they need to be applied and used responsibly. 

Skilled people and a defined governance is essential to use AI and ML responsibly, and these technologies will greatly aid more mature companies. 

The application of AI and ML should be about reducing business risk, not just using expensive technology with no credible benefits. 

4 – AI and ML as Pressure Reducers 

While the rest of the advice warns of the potential impact AI reliance will have on inexperienced teams, AI and MI provide major benefits. 

AI and ML technology is well known for reducing overall workload by analysing massive amounts of data in a shortened time span, enabling threats to be identified efficiently and effectively. 

As businesses mature, AI and ML technology will help them expand their capabilities even if they cannot expand their team. 

5 – Expansion of IoT

Though IoT technology is growing in popularity, its security standards need to catch up. Vulnerabilities of IoT tech is well documented, and is falling behind even as the technology becomes more widespread. 

Ineffective software development and poor design standards can leave networks vulnerable to attack. Also, a lack of physical hardening and insecure storage and transmission of data make many IoT devices easy targets for cybercriminals. 

Microsoft’s new report outlining cybersecurity risks globally showed IoT devices as a major risk for hackers, as they provide openings to networks with little security. 

The affordability of many IoT devices means that they are often left unmanaged and untracked, leaving room for hackers to take advantage. 

Malware can easily target mass-produced IoT devices, especially those without built in security functions. 

Recommended

• Placing data centres in Scotland could cut carbon impact
• Scottish scale-up investment slows as VC’s exercise caution
• New CENSIS programme to drive IoT upskilling across Scotland

Security tooling specific to IoT devices can enable risk assessment, and then wider monitoring solutions can be taken to reduce overall risk. 

6 – Legislation (both in the UK and EU)

Government action for cybersecurity is a growing trend, coming in the form of legislation and initiatives via government bodies. 

Last year, the UK government introduced the Product Security and Telecommunications Infrastructure Bill, designed to codify rules and regulations for technology manufactures to better ensure security measures are taken in IoT technologies. 

Government agencies in the UK are also taking action: the NCSC has launched a new ‘scanning’ system to audit devices and networks to identify vulnerabilities and track security measures. 

Businesses need to both consider if they are staying in line with changing legislation, and be aware of helpful initiatives to keep theri devices and networks secure.

Get the latest news from DIGIT direct to your inbox

Our newsletter covers the latest technology and IT news from Scotland and beyond, as well as in-depth features and exclusive interviews with leading figures and rising stars.

To subscribe, click here.