Cybersecurity trends to expect in 2024 

Cybersecurity trends can feel like a massive hurdle. Whether it’s an emerging threat or an industry disruptor, responding to them is vital to keeping your company’s (and your customers’) data safe and secure.

What trends are we seeing so far in 2024?

Notably, bad actors have seized on advancements in artificial intelligence (AI) and the continued growth of remote work to aggressively target organizations. Companies need to be aware of what to do to protect themselves, as do aspiring or current cybersecurity professionals. Keeping up to date on scam tactics can help you better inform clients and employees.

That’s just a glimpse at what’s going on in the cybersecurity world. Let’s explore 12 of the biggest trends impacting cybersecurity at mid-2024 and beyond.

Companies increasingly rely on AI and machine learning to enhance threat detection, response times and their overall cybersecurity posture. But the more systems and sensitive data a company has, the more targets are available to hackers. That’s why advances in automation can make cybersecurity practices more efficient.

For example, organizations can use machine learning and data correlation to collect substantial amounts of threat data. They can use this data to develop countermeasures, which can help identify suspicious activity before it has a chance to damage or compromise systems. Some organizations have their team do this internally while others outsource this task.

How AI can affect organizational assets, security best practices for AI systems and how to leverage machine learning to detect threats are among the many skills needed in cybersecurity. 

Even though the tech sector at large is seeing massive shifts in labor volatility, one segment isn’t: cybersecurity. The U.S. Bureau of Labor Statistics (BLS) projects job growth for information security analysts to increase between 2022 and 2032 by almost 32%. That’s an additional 16,800 jobs openings per year.

Experts have witnessed a massive gap in cybersecurity talent for years, and companies have scrambled to catch up. Cybersecurity-related job duties have often fallen to other IT professionals.

If you’re interested in a career focused on cybersecurity and information, salary information may be of interest to you. As of May 2023, it’s reported that information security analysts earned between $69,210 and $182,370 per year, with a median wage of $120,360, according to BLS.

BLS Occupational Employment Projections, 2022-2032 is published by the U.S. Bureau of Labor Statistics. This data reflects BLS’ projections of national (not local) conditions. These data points are not specific to University of Phoenix students or graduates.

Salary ranges are not specific to students or graduates of University of Phoenix. Actual outcomes vary based on multiple factors, including prior work experience, geographic location and other factors specific to the individual. University of Phoenix does not guarantee employment, salary level or career advancement. BLS data is geographically based. Information for a specific state/city can be researched on the BLS website.

Internet of Things (IoT) devices include smartwatches, smart speakers, home assistants, TVs with built-in streaming, and more. They can make life more convenient, but they also bring entry points and opportunities for cyber threats and breaches. The devices’ interconnected nature introduces substantial security vulnerabilities.

We spoke with J.L. Graff, MBA, associate dean of UOPX’s College of Business and Information Technology, about remaining vigilant.

“Previously, you may have needed to take precautions regarding your email security to protect against phishing attacks on a home computer. Today, you must remain even more vigilant and take precautions against threats that can compromise your email, online banking, and other connected devices and accounts.”

Statistics shed light on the escalating risk associated with IoT devices. A recent report highlights a disturbing trend. Compared with the previous year, 2023 saw a 37% increase in IoT cyberattacks in just the first half of the year. This uptick underscores how attractive the devices are to criminals.

Securing IoT endpoints is a major concern for individuals and organizations. Because the vast array of connected devices lacks standardized security measures, it’s prone to exploitation. Strong encryption, regular software updates and stringent access controls are key to ensuring the safety of these devices.

Legislative efforts to protect data privacy have ramped up in recent years. One pivotal bill recently under consideration, the proposed American Data Privacy and Protection Act (ADPPA), would usher in a new era of data protection and individual privacy.

ADPPA aims to set a comprehensive national standard for data privacy that supersedes the current patchwork of state-level laws. However, as of 2024, the ADPPA has yet to see substantial movement out of the U.S. House of Representatives. In its place, the House has begun hearings on a new version, the American Privacy Rights Act (APRA). The APRA is a relatively recent development, but many of its mechanisms borrow from the ADPPA. Some critical differences, however, are in the treatment of small businesses, the interactions with state laws and its approach toward minors.

While national efforts have seen little momentum, states continue to pass their own privacy laws to safeguard data privacy. California, Virginia and Colorado are among the states that have enacted data statutes. The laws require businesses to adhere to certain guidelines regarding data transparency and the rights of consumers to access and control their personal data. They also provide guidance on the implementation of robust cybersecurity strategies to protect against data breaches.

Why are these laws so impactful to cybersecurity teams and their clients? Their evolving nature necessitates a proactive approach to compliance. Companies must stay aware of federal and state laws to ensure practices meet all legal obligations. Through regular data audits and updates to privacy policies, organizations should constantly seek efforts to enhance their cybersecurity frameworks.

The near future is shaping up to be a pivotal period for hacktivism, largely thanks to a series of key (and controversial) global events. The United States’ presidential election, the Summer Olympics and ongoing geopolitical crises are potentially setting the stage for significant increases in digital activism tactics like hacktivism.

Hacktivism is the act of hacking into websites or computer systems for political or social motivations. It’s an increasingly prominent tool for digital protest, and it’s extremely disruptive.

The high-profile events in 2024 offer plenty of opportunities for hacktivists to draw attention to their causes. Activists use cyberattacks to influence public opinion and disrupt normalcy. The motivations behind these attacks range from promoting specific political agendas to advocating for human rights. Hacktivism is civil disobedience and a potential threat to online security.

Common forms of hacktivism include using denial-of-service (DDoS) attacks to flood a website or app with requests, clogging its servers and rendering it useless to regular visitors. Another common tactic is doxxing, or releasing private or identifying information about a person of interest, whether it’s a whistleblower or an official or executive. Another method includes leaking sensitive information.

In some cases, hacktivism takes the form of state-sponsored cyberattacks. These attacks are becoming increasingly common, especially as adversaries of the United States seek to influence elections and destabilize the country and its economy.

Ransomware is a type of malicious software, or malware, that blocks access to computer systems until the victim pays a specific sum of money. Ransomware attacks and their escalation pose significant risks to organizations that endanger critical data and operations.

Ransomware today relies on advanced file encryption techniques that make it more difficult to counter. Without the decryption key, the data is harder to recover.

How bad is ransomware? According to cybersecurity firm NCC Group, the number of ransomware attacks in 2023 increased by 84% from the previous year. And while North American companies remain the most targeted victims, the industries affected vary. Industries (such as healthcare), consumer goods and technology sectors were the biggest victims.

Companies that want to reduce their vulnerability to ransomware should invest heavily in antivirus and antimalware software, but they should also closely monitor emails and networks in real time. Other useful tools include virtual private networks (VPNs) and multifactor authentication (MFA). VPNs mask locations and keep hackers from infiltrating networks, while MFA is a layered login process that requires more than just a password.

Any company that suspects a ransomware attack should notify the local FBI office and the provider of its antimalware software.

While malware continues to be a concern for cybersecurity experts, recent increases in zero-day vulnerabilities make this threat a significant one. Zero-day vulnerabilities are weaknesses or openings in systems or devices that companies have disclosed but have yet to patch. Attacks that target these vulnerabilities are zero-day exploits.

Hackers might structure their extortion schemes around ransomware attacks, data theft or DDoS threats, leaving financial and reputational damage in their wake.

“A well-known instance of a zero-day exploit was the WannaCry ransomware attack in 2017,” Graff says. “The attack exploited a vulnerability in Microsoft Windows operating systems that affected 200,000+ computers across 150+ countries. The attack targeted systems that had not applied the latest security patches, making them vulnerable for such an attack. To regain access to their systems and files, many victims resorted to paying a ransom.”

In 2023, bad actors exploited 97 zero-day vulnerabilities, up from 62 identified in 2022. 

Over time, scammers have gotten smarter and adopted more sophisticated tools and methods. That includes using generative AI tools like ChatGPT. Cyberattackers leverage AI tools to deceive users in many ways, including the following:

• Scammers are writing more convincing, error-free and less suspicious phishing copy. They’re also using AI tools to simulate real-time conversations and impersonate users. The days of wild misspellings and poor grammar in phishing messages are mostly over.
• They are using AI tools to create fake content, such as social media profiles and malicious websites that collect credentials and user information. Generative AI allows them to do this at scale.
• Believable deepfake videos and voice memos are also being created.
• Scammers have even used generative AI to create authentic-looking documents to breach defenses.

Despite the many advances in computer protection, passwords remain the key security feature for almost all computers, electronic devices, websites and software. Phishing scams and keystroke-tracking malware seek to steal passwords.

While password managers are an effective way to help mitigate compromised login information, password-less authentication will likely see explosive growth in 2024 and beyond. Companies at the forefront of this practice are relying on biometrics, registered smartphones and one-time passwords more than ever.

A blockchain refers to a decentralized ledger containing data for all transactions performed across a given network. This network connects the data in a decentralized chain. Multiple parties verify every change to the collection, so it is impossible for a single entity, such as a hacker, to change the data.

People are most familiar with public blockchains, such as those associated with cryptocurrency like bitcoin. However, you can also deploy private and permissioned blockchains. They still use the same multiple-verification chain, but only parties with special permission to access the closed system can participate.

What makes blockchain technology so useful for cybersecurity? Because it prevents data tampering, it can help organizations secure sensitive information against cyberthreats.

Remote work is here to stay, which means cybersecurity professionals must stay aware of threats that specifically target organizations through remote workers.

For example, remote access enables off-site workers and staff to access an organization's central systems without being in the office. While remote access increases flexibility and enhances work-life balance, it also increases cybersecurity risks and makes protecting company data more complex.

Some common problems related to remote access are:

• Using personal devices with weak security or unsecured apps to access a secured work system
• Accessing sensitive company data through unsafe Wi-Fi networks
• Sharing unencrypted files on the secured network
• Not practicing physical security, such as hiding your password, when in a public setting

Companies can limit these issues by setting up firewalls and running intrusion detection software, which alerts security personnel to unusual activity. Companies also need to educate employees on cybersecurity best practices.       

Another way to mitigate the potential for cybersecurity issues with remote workers? VPNs. As mentioned, VPNs can mask locations and keep hackers from infiltrating a company’s networks. VPN networks may boost cybersecurity in several ways:

• A VPN automatically encrypts all traffic from your device and your company’s network. This enables secure remote access to company information. Features like this can be especially useful when accessing remote systems via Wi-Fi.
• A VPN can mask users’ locations, IP addresses and other details. This keeps users anonymous and limits the possibility of targeted cyberattacks.
• A VPN can help keep cloud-based assets secure by obscuring the paths used to access cloud systems.

With VPNs in place, companies can lower the risk of cyberattacks, and individuals can mitigate issues related to unsecured Wi-Fi networks.

Finally, there’s the opportunity to use cloud migration as a tool for cybersecurity. Cloud migration involves moving tools, such as applications, databases and software, to cloud systems, which employees then access remotely. Companies do not need to maintain their own servers. Many organizations migrate to the cloud to minimize costs and maximize accessibility. Cloud-based systems also offer security enhancements, such as round-the-clock threat management.

Moreover, finance and healthcare companies can help ensure regulatory compliance and protect sensitive customer and patient data by requiring a connection to a central cloud-based system.

Cloud migration can lead to security challenges, however. Poorly configured networks, compromised or unsecured connections, and unauthorized access make a cloud system vulnerable to hacking.

With increasing challenges to cybersecurity come increasing opportunities to rethink, innovate and protect. One way to stay ahead of the curve? Ongoing education. 

Companies that are vigilant about cybersecurity often emphasize educating their teams about best practices and security awareness. This mitigates human error-related security incidents for both in-house and remote workers. Some of the most common education topics for organizations in 2024 include:

• Phishing attacks
• Business email compromises
• Securing removable media

Cybersecurity trends may shift, but the demand for professionals who know how to manage and adapt to new technology will be a constant for the foreseeable future. An online degree in technology can help prepare you for a career in this field.

University of Phoenix offers a Bachelor of Science in Cybersecurity to help aspiring professionals. Students can choose from two specializations: Cybersecurity Operations and Cybersecurity Analyst Defender.

UOPX also offers a Master of Science in Cybersecurity for individuals who wish to expand and deepen their understanding of cybersecurity.

If the time isn’t right for a degree program, earning an information technology certificate may be a good option. Focused and geared toward skills-relevant education, certificates can often be completed in under a year. Explore options like the Advanced Cybersecurity Certificate and the Cyber and Network Defense Certificate.

Request information about training that can prepare you to begin your cybersecurity career. You can also enroll in your first course today.