2025 Cloudflare Signals Report

5 critical security trends mandating a C-suite response

Resilience at scale used to be optional. Not anymore. A new generation of smarter, stronger, and faster global digital threats are creating heightened exposure across the pillars of the enterprise — finance, operations, compliance, security, and reputation — demanding a coordinated, C-suite-wide response.

The 2025 Cloudflare Signals Report highlights five critical fault lines where cyber resilience must be built in, not bolted on:

  • AI-powered threats and insider risks
  • Zero Trust, identity protection, and cloud complexity
  • Resilience: now a requirement, not a “nice to have”
  • Data privacy in a post-quantum, post-encryption environment
  • Geopolitical risk and targeted cyber operations

Together, they reveal a new mandate for today’s executive teams: the need to embed resilience into (the core of) how your business operates, innovates, and grows — at scale.

AI-driven cyber threats are evolving at an unprecedented pace, making traditional security
approaches ineffective. Attackers now use AI to automate attacks, evade detection, and
exploit vulnerabilities faster than organizations can respond. The shift from passive defense to
proactive, AI-driven security is no longer optional — it is essential.
AI-powered attacks are already causing real business impact. Seventy-four percent of IT security
professionals report that AI-driven threats are significantly affecting their organizations.1
Deepfake scams, such as fraudulent video calls, have resulted in millions in losses, with one case in Australia leading to a $25 million theft.2 AI-generated phishing attacks are becoming more convincing, while AIenhanced malware adapts to evade traditional defenses.