--- title: "The Evolving Threat Landscape: Five Trends To Expect In 2020 And Beyond" description: "The Evolving Threat Landscape: Five Trends To Expect In 2020 And Beyond" --- [![TowerWall](https://blog.towerwall.com/hubfs/raw_assets/public/Towerwall_July2021/images/head-logo-2.svg "TowerWall")](https://towerwall.com/) [![TowerWall](https://blog.towerwall.com/hubfs/raw_assets/public/Towerwall_July2021/images/towerwall-logo-white-test.svg "TowerWall")](https://towerwall.com/) - [Our Partners](https://towerwall.com/how-we-protect-you/our-technology-partners/) - Our Solutions - - Our Cybersecurity Solutions - We operationalize infosec, building security solutions that safeguard your most critical assets. - - [Solutions Overview](https://towerwall.com/cybersecurity-solutions/) - [Risk Assessments & Security Reviews](https://towerwall.com/cybersecurity-solutions/risk-assessments-security-reviews/) - [Program & Policy Development](https://towerwall.com/cybersecurity-solutions/program-policy-development/) - [Incident Response & Remediation](https://towerwall.com/cybersecurity-solutions/incident-response-remediation/) - [Managed Detection & Response](https://towerwall.com/cybersecurity-solutions/managed-detection-response/) - - [Compliance & Privacy](https://towerwall.com/cybersecurity-solutions/compliance-privacy/) - [Comprehensive Security Training](https://towerwall.com/cybersecurity-solutions/comprehensive-security-training/) - [Vulnerability Protection](https://towerwall.com/cybersecurity-solutions/vulnerability-protection/) - [Penetration Testing](https://towerwall.com/cybersecurity-solutions/penetration-testing/) - Virtual Security Officers - - Virtual Security Officer - Leverage the experience and security acumen of Towerwall’s on-demand security experts. - - [Virtual Chief Information Security Officer (VCISO)](https://towerwall.com/virtual-security-officers/virtual-chief-information-security-officer-vciso/) - [Virtual Data Protection Officer (vDPO)](https://towerwall.com/virtual-security-officers/virtual-data-protection-officer-vdpo/) - [Virtual Chief Privacy Officer (vCPO)](https://towerwall.com/virtual-security-officers/virtual-chief-privacy-officer-vcpo/) - We Advise - - We Advise - One-size security solutions only lead to failure. - Industries - [Higher Education](https://towerwall.com/industries/higher-education/) - [Financial Services & Banking](https://towerwall.com/industries/financial-services-banking/) - [Healthcare](https://towerwall.com/industries/healthcare/) - [BioPharma & Bio-Therapeutics](https://towerwall.com/industries/biopharma-bio-therapeutics/) - [Retail](https://towerwall.com/industries/retail/) - [Government](https://towerwall.com/industries/government/) - [Catholic Diocese](https://towerwall.com/industries/catholic-diocese-cybersecurity/) - [Cannabis](https://towerwall.com/industries/cannabis/) - [Small Business](https://towerwall.com/industries/small-business/) - [Enterprise](https://towerwall.com/industries/enterprise/) - Trends & Threats - [Remote Workforce](https://towerwall.com/trends-threats/remote-workforce/) - [Vendor Questionnaire](https://towerwall.com/trends-threats/vendor-questionnaire/) - [HIPAA](https://towerwall.com/trends-threats/hipaa/) - [Ransomware](https://towerwall.com/trends-threats/ransomware/) - [GDPR](https://towerwall.com/trends-threats/gdpr/) - [Cloud Security](https://towerwall.com/trends-threats/cloud-security/) - [Phishing](https://towerwall.com/trends-threats/phishing/) - [Cybersecurity Insurance](https://towerwall.com/trends-threats/cybersecurity-insurance/) - [Resources](https://towerwall.com/resources/) - - Resources - Our latest insights, events, and tools to keep you safe. - - [Insights](https://towerwall.com/resources/?resources_category=MTU%3D&focusarea=0&industries=0&search=) - [Webinars](https://towerwall.com/resources/?resources_category=MTg%3D&focusarea=0&industries=0&search=) - [Whitepapers](https://towerwall.com/resources/?resources_category=MTY%3D&focusarea=0&industries=0&search=) - [View All](https://towerwall.com/resources/) - [Company](https://towerwall.com/company/) - - Our Company - We are the industry’s leading cybersecurity preparedness partner. - - [Who We Are](https://towerwall.com/company/) - [Our Team](https://towerwall.com/company/our-team/) - [Our Approach](https://towerwall.com/our-approach/) - [Our Values](https://towerwall.com/company/our-values/) - - [Awards & Recognition](https://towerwall.com/company/awards-recognition/) - [Certifications & Affiliations](https://towerwall.com/company/certifications-affiliations/) - [Community Involvement](https://towerwall.com/company/community-involvement/) - [Careers](https://towerwall.com/company/careers/) - [Contact Us](https://towerwall.com/company/contact-us/) Topics Zero-trust networks, California Consumer Privacy Act (CCPA), artificial intelligence, Phishing, GDPR, PCI, malware, ransomware, Internet of Things, European General Data Protection Regulation (GDPR), Cloud Security, HIPAA, Compliance, COVID-19, remote browser isolation (RBI), cannabis, Enterprise # The Evolving Threat Landscape: Five Trends To Expect In 2020 And Beyond [By Michelle Drolet](https://blog.towerwall.com/author/towerwall2020) [Read More](https://blog.towerwall.com/author/towerwall2020) 3 Minute Read January 14, 2020 2019 is set to break a record for the [highest number](https://www.securitymagazine.com/articles/91366-the-top-12-data-breaches-of-2019) of security incidents ever recorded and probably the biggest and [most expensive year](http://csoonline.com/article/3410278/the-biggest-data-breach-fines-penalties-and-settlements-so-far.html) in terms of data breach fines, penalties and court settlements. While large-scale breaches always make big headlines, hackers are not sparing small businesses and consumers. As we head into the new decade, cyberattacks will continue to grow in scale and volume. Cybersecurity is a fast-evolving industry, as hackers and security providers both continuously try to outsmart each other. Cybersecurity Ventures estimates that organizations will spend an estimated [$1 trillion](https://cybersecurityventures.com/cybersecurity-market-report/) on cybersecurity from 2017 to 2021. Let's look at some of the innovations and emerging technology trends that are likely to shape the cybersecurity industry in 2020. ### 1. Zero-trust networks and remote browser isolation. As the introduction of new devices, applications, the cloud and the internet of things (IoT) rapidly gains pace, the enterprise perimeter is slowly fading away. This calls for a new security approach built around zero trust; in other words, trust no one whether inside or outside your network. Zero-trust architecture inspects and monitors all traffic and adds authentication parameters like user identity, behavior-based scoring, location and multifactor authentication to the mix. According to a [study](https://www.zscaler.com/resources/industry-reports/zero-trust-adoption-report-cybersecurity-insiders.pdf) conducted by Cybersecurity Insiders, 75% of enterprises in the U.S. are planning to deploy a zero-trust solution for a specific use case over the next 12 months. Zero trust is built around the concept of microsegmentation — that is, defining users into smaller groups and granting limited access privileges (per their job role) to allow them to complete predefined tasks. But what about users who cannot be easily segmented? Should these users be blocked? Enter remote browser isolation (RBI) or zero-trust browsing. Report Consultant [predicts](https://www.ittechnologynews24.com/browser-isolation-software-market-to-witness-huge-growth-by-2024-by-top-key-players-cylanceprotect-bromium-apozy-appsulate-authentic8-silo-cigloo-crusoe-cyberwall/) RBI will grow exponentially and change the playing field. By isolating the browser away from the endpoint, RBI ensures that an employee's system remains untouched even if the browser is infected. Basically, users browse in an environment that is totally outside of the company infrastructure, isolated in a cloud. (Gartner [identified RBI](https://www.businesswire.com/news/home/20180405005669/en/Isolation-Key-Preventative-Strategy-Gartners-Adaptive-Security#:~:targetText=Gartner%20identifies%20remote%20browser%20isolation,to%20detect%20or%20identify%20malware.) as a "key preventive strategy in its adaptive security architecture for attack protection.") ### 2. The next wave of privacy, security and compliance. Following the introduction of the European Union's data privacy act (GDPR), several regions and countries around the world have implemented or considered their own privacy laws. In the GDPR's debut year, Google was [fined $57 million](https://www.vox.com/2019/1/22/18193250/google-gdpr-fine-france-privacy-57-million) for violations. The [California Consumer Privacy Act](https://www.csoonline.com/article/3292578/california-consumer-privacy-act-what-you-need-to-know-to-be-compliant.html) (CCPA) will take effect on January 1, 2020, and will offer similar protection to California users: the right to know whether their personal data is being collected and sold as well as the ability to request the deletion of any personal information collected on them. There's also a shift in consumer attitudes and demands toward privacy and compliance. As the demand for security and compliance grows, organizations will increasingly purchase products and services that will help them fulfill compliance obligations and also ensure the privacy and security of their customers. This demand will open up new roles in 2020 that demand compliance skills and knowledge. ### 3. Deep learning and artificial intelligence (AI) to help monitor and detect emerging threats. Technology continues to evolve at a rapid pace — and so does the attack surface. Hackers now have an even larger attack surface to exploit. The sheer number of assets across platforms, users, devices, applications and so on opens doors to more and more threats. When it comes to cybersecurity, a proactive approach is much better than a reactive one. In 2020, organizations will move beyond traditional approaches that rely on learning from known attacks or historical data. Instead, organizations will deploy solutions powered by deep learning and AI that are capable of analyzing complex situations with a level of detail that is impossible with traditional methods. According to a [study](https://www.globenewswire.com/news-release/2019/07/11/1881577/0/en/69-of-organizations-believe-that-they-will-not-be-able-to-respond-to-cybersecurity-threats-without-AI.html) from the Capgemini Research Institute, 63% of organizations are planning to deploy AI by 2020 in an effort to boost their defenses, and 69% of organizations believe they will be unable to monitor and respond to cybersecurity threats without AI. ### 4. Phishing attacks beyond email. Phishing is the [No. 1 cause](https://enterprise.verizon.com/resources/reports/2019-data-breach-investigations-report-emea.pdf) of data breaches in 2019. 2020 will see no abatement, as phishing attacks will become even more sophisticated and highly targeted than ever before. Email is no longer the only means of a phishing attack. Attackers might also send an SMS or launch targeted social engineering attacks via [social media](https://www.forbes.com/sites/forbestechcouncil/2019/09/09/top-social-media-scams-and-how-to-avoid-them/#401dad99873d). New [research](https://www.darkreading.com/threat-intelligence/as-phishing-kits-evolve-their-lifespans-shorten/d/d-id/1336220) from Akamai (via Dark Reading) has uncovered that 60% of all phishing kits found on the dark web are active for 20 days or less, indicating that cybercriminals will continue to develop new evasion techniques to keep their kits undetected. Organizations in 2020 will continue to up their ante in the race to combat phishing attacks. This will, of course, not only include proper [security awareness training](https://www.forbes.com/sites/forbestechcouncil/2019/08/16/seven-tips-for-a-successful-security-awareness-training-program/#4abe667def20) for all employees and business partners, but also include vulnerability management and [penetration testing](https://www.forbes.com/sites/forbestechcouncil/2019/03/26/why-penetration-testing-is-critical-to-bolster-your-cybersecurity-efforts/#40e010951397) to help prevent security breaches. ### 5. Cloud security. A recent [report](https://www.globenewswire.com/news-release/2019/11/20/1950024/0/en/IT-Professionals-Want-to-Embrace-Cloud-Services-Update-IT-Infrastructure-and-Expand-Job-Roles.html) from INAP indicated that roughly 9 out of 10 (88%) enterprises will migrate some of their workload to the cloud by 2022. The rapid shift to the cloud has cybersecurity professionals thinking about the complications of protecting these workloads. While the traditional model uses a perimeter-based approach for security, the perimeter quickly fades away in the world of cloud computing. Insider threats, misconfigured services and shadow workloads containing sensitive data signify that the cloud needs an inside-out approach to security. This is reinforced by Gartner, which [recently predicted](https://www.gartner.com/smarterwithgartner/is-the-cloud-secure/) that "through 2025, 99% of cloud security failures will be the customer's fault." The cloud is a shared responsibility, after all, and in 2020 and beyond, more CEOs, CIOs and CSOs will accept responsibility and ownership of the cloud. In line with the above growth, 2020 will see a growing demand for technologies that secure cloud containers, cloud assets, cloud identities and more, including the demand for professionals who are skilled at managing and securing the cloud. This article was originally posted on Forbes.com. [Click here to read >](https://www.forbes.com/sites/forbestechcouncil/2020/01/14/the-evolving-threat-landscape-five-trends-to-expect-in-2020-and-beyond/#198ddeac521d) #### The Evolving Threat Landscape: Five Trends To Expect In 2020 And Beyond Back to Top ## Related Insights ### [The Anatomy Of A Sophisticated, Large-Scale Ransomware Attack](https://blog.towerwall.com/the-anatomy-of-a-sophisticated-large-scale-ransomware-attack) Zero-trust networks, California Consumer Privacy Act (CCPA), artificial intelligence, Phishing, GDPR, PCI, malware, ransomware, Internet of Things, European General Data Protection Regulation (GDPR), Cloud Security, HIPAA, Compliance, COVID-19, remote browser isolation (RBI), cannabis, Enterprise ### [Don't Bite That Phishing Bait: Bet On These Five Simple Safety Rules](https://blog.towerwall.com/dont-bite-that-phishing-bait-bet-on-these-five-simple-safety-rules) Zero-trust networks, California Consumer Privacy Act (CCPA), artificial intelligence, Phishing, GDPR, PCI, malware, ransomware, Internet of Things, European General Data Protection Regulation (GDPR), Cloud Security, HIPAA, Compliance, COVID-19, remote browser isolation (RBI), cannabis, Enterprise [View All Insights](https://blog.towerwall.com) × ## Talk with us now about: #### Your security needs. - ![Phone](https://blog.towerwall.com/hubfs/raw_assets/public/Towerwall_July2021/images/phone-icon.svg "Phone") [Call 774.204.0700](tel:774.204.0700) - ![Mail](https://blog.towerwall.com/hubfs/raw_assets/public/Towerwall_July2021/images/mail-icon.svg "Mail") [Email Us](mailto:info@towerwall.com) ### The front line of cybersecurity.™ For over 23 years, Towerwall, a woman-owned business, has helped scores of companies safeguard their data and leverage their investment in IT with advanced information security technology solutions and services. Our experience in all facets of information security coupled with serving in the CIO/CISO/ISO roles provides a unique first-hand understanding of the security challenges organizations face daily. ### Connect - - - - - [Career Opportunities](https://towerwall.com/company/careers/) - [Contact Us](https://towerwall.com/company/contact-us/) © Towerwall, Inc. and its licensees. All rights reserved [Privacy Policy](http://towerwall.com/privacy-policy/) Sitemap [Created by Howbridge](https://meethowbridge.com/) [![Towerwall](https://blog.towerwall.com/hubfs/raw_assets/public/Towerwall_July2021/images/footer-logo.svg "Towerwall")](https://towerwall.com/)