Global Cybersecurity Outlook 2025
Page 12 of 49 · WEF_Global_Cybersecurity_Outlook_2025.pdf
0 10% 20% 30% 40% 50%Which organizational cyber risk concerns you the most?
Ransomware attack 45%
Cyber-enabled fraud
(including phishing, other
business email compromise,
vishing, etc.)20%
Supply chain disruption 17%
Malicious insider 7%
Disinformation 6%
Denial of service (DoS)
and distributed denial of
service (DDoS) attacks6%Ransomware remains the top organizational
cyber risk year on year, with 45% of respondents
ranking it as a top concern in this year’s survey.
According to leaders at the Annual Meeting on
Cybersecurity 2024, significant innovations in
ransomware attacks should be expected. This
is compounded by the continued adoption of
Ransomware-as-a-Service (RaaS), entrenching
the commoditization of the ransomware model.8Cyber-enabled fraud ranks as the second-highest
organizational cyber risk for 2025, viewed by
CEOs as a significant threat alongside ransomware
and supply chain disruptions. At the same time,
identity theft climbs to the top of the agenda,
emerging as the primary personal cyber risk for
both CISOs and CEOs.2.1 The cyberthreat landscape
The evolution of cybercrime
Organizational cyber risks ranked – 2025 FIGURE 3
12
Global Cybersecurity Outlook 2025
Ask AI what this page says about a topic: