Global Cybersecurity Outlook 2025
Page 17 of 49 · WEF_Global_Cybersecurity_Outlook_2025.pdf
Escalating geopolitical tensions and increasingly
sophisticated cyberthreats pose significant risks to
critical infrastructure, which depends on networks
of interconnected devices and legacy systems.
The ongoing conflict in Ukraine exemplifies these
vulnerabilities, with critical sectors such as energy,
telecommunications, water and heating repeatedly
targeted by both cyber and physical attacks.16
These attacks often focus on disrupting control
systems and compromising data, highlighting the
critical risks associated with operational technology
(OT). As cyberthreats continue to evolve, they
not only threaten system functionality but also
jeopardize human safety, increasing the severity and
consequences of disruptions to vital infrastructure.
Some critical, high-risk areas to monitor are:
Water facilities
Cyberattacks on water facilities pose significant
risks to public safety, infrastructure and national
security. The Cybersecurity and Infrastructure
Security Agency (CISA) of the United States
outlined these risks in a toolkit, emphasizing the
vulnerabilities in OT systems used in water facilities,
such as remote access points and outdated
software.17 Cybercriminals can exploit these
weaknesses to disrupt water-treatment processes,
causing potential contamination, loss of service or
other hazardous consequences. A notable example
of these threats occurred in October 2024, when a
cyberattack targeted the largest water utility in the
United States, disrupting operations and raising
alarms about the security of critical infrastructure.18Biosecurity
Rapid technological advances have redefined the
biological threat landscape, with biosecurity coming
to the forefront. The World Health Organization (WHO)
has warned that advances in artificial intelligence,
cyberattacks and genetic engineering could pose
potentially catastrophic risks to global biosecurity.19
A 2024 WHO report highlighted several ways in
which cyberthreats could compromise biosecurity,
including accessing sensitive data or research,
disruption of laboratory security systems, theft or
sabotage of biosecurity-relevant information and
espionage for competitive or harmful objectives.20
Furthermore, cyberattacks could incapacitate
essential laboratory systems, interrupting operations
and causing loss of data integrity, which would
delay critical research or compromise safety
protocols. Over the course of 2024, two laboratories
were targeted in South Africa and the United
Kingdom.21 These vulnerabilities underscore the
need for advanced cybersecurity measures in
biosecurity strategies to address these growing risks.
Simultaneously, the sensitive nature of genomic data
poses new risks due to its unique qualities, such as
the ability to identify individuals and reveal their familial
ties.22 These characteristics expose genomic data
to threats such as reidentification from seemingly
anonymous datasets, unauthorized access leading to
privacy violations and potential misuse. The breach of
a genetic-testing company in late 2023 that exposed
the data of nearly 7 million people has already trained
the spotlight on these risks.Beyond cybercrime: Emerging threats to
critical infrastructure and human safety
With emerging technologies reshaping the landscape, cyber is no longer
limited to the CIA triad: confidentiality, integrity and availability of information.
Cybersecurity now encompasses human safety and needs to address the
real risk to people’s lives when a system is attacked or compromised.
Bushra AlBlooshi, Director of Cybersecurity Governance Risk Management
Department, Dubai Electronic Security Centre
As genomics continues to evolve as a critical field, securing sensitive
biological data, the interconnected systems and the users becomes
essential. The protection of bioinformatics platforms, along with the
prevention of misuse in biotechnical applications, is vital. This includes
safeguarding data analytics and securing the broader ecosystem
of interconnected systems to mitigate risks across sectors. As
these emerging technologies grow, the need for robust security in
bioinformatics, their analytics and cyber-physical systems will only
increase, creating new resiliency challenges for cybersecurity leaders.
Hoda Al Khazimi, Director, Centre for Cybersecurity,
New York University Abu Dhabi
Global Cybersecurity Outlook 2025
17
Ask AI what this page says about a topic: