2025 Insider Risk Report Finds Most Organizations Struggle to Detect and Predict Insider Risks
好,我现在要帮用户总结这篇文章。首先,我需要通读整篇文章,理解其主要内容和重点。文章是关于2025年 insider risk report的,由Cybersecurity Insiders和Cogility合作发布。 文章提到,93%的安全领导认为内部威胁比外部攻击更难检测,但只有23%的人对阻止这些威胁有信心。这显示出内部威胁的严重性和组织应对能力的不足。此外,报告指出大多数组织仍然处于被动应对状态,尽管AI驱动的风险增加和远程工作的普及。 关键发现包括:检测内部攻击的难度、行为分析的盲点以及预测防御的缺失。 Holger Schulze的话强调了缺乏背景信息导致安全团队无法有效应对内部威胁。 接下来,我需要将这些信息浓缩到100字以内,并且不使用“文章内容总结”之类的开头。要确保涵盖主要数据点:93%的困难、23%的信心、行为盲点、预测模型不足以及AI带来的风险增加。 最后,我要确保语言简洁明了,准确传达文章的核心信息。 </think> 2025年内部风险报告显示,93%的安全领导者认为内部威胁比外部攻击更难检测,但仅23%对其预防能力有信心。多数组织仍依赖被动应对,缺乏行为分析和预测模型支持。AI驱动风险加剧背景下,内部威胁防控能力亟待提升。 2025-11-4 12:54:14 Author: securityboulevard.com(查看原文) 阅读量:9 收藏

Baltimore, USA, November 4th, 2025, CyberNewsWire

Cruise Con 2025

The new 2025 Insider Risk Report, produced by Cybersecurity Insiders in collaboration with Cogility, highlights that nearly all security leaders (93%) say insider threats are as difficult or harder to detect than external cyberattacks. Yet only 23% express strong confidence in stopping them before serious damage occurs. The report warns that most organizations remain reactive despite a surge in AI-driven risks and the increasing prevalence of decentralized workforces.

The report, which surveyed 635 CISOs and cybersecurity professionals, highlights an urgent industry contradiction: while there is high awareness of insider risks, the capabilities to anticipate and prevent them are dangerously limited. Without stronger behavioral intelligence and predictive modeling, organizations risk being blindsided by trusted insiders misusing powerful new tools.

Key findings include:

  • Flying blind against insiders: 93% of organizations find insider attacks as hard or harder to detect than external threats. At the same time, fewer than one in four are confident in preventing them before major damage.
  • Behavioral blind spots: Only 21% extensively integrate HR, financial stress, or psycho-social signals into detection, leaving most programs relying solely on technical anomalies.
  • Predictive defenses are missing: Only 12% have mature predictive risk models, leaving the majority in reactive mode, while AI-enabled insider risks accelerate.

“Insider threats don’t announce themselves with alarms – they unfold quietly, in plain sight,” said Holger Schulze, founder of Cybersecurity Insiders. “Without context like financial stress or behavioral shifts, security teams are watching shadows on the wall while the real danger moves unchecked. If organizations fail to evolve, they’ll be reading about their data on the dark web before they ever see it in their logs.”

The full report can be read here.

About Cybersecurity Insiders

Cybersecurity Insiders is the trusted intelligence source for CISOs and cybersecurity decision-makers seeking strategic clarity in a complex, fast-moving industry. Backed by more than a decade of analyst-led research and a global community of over 600,000 cybersecurity professionals, we deliver evidence-based insights, original data, and expert commentary to help leaders navigate threats, assess emerging technologies, and shape forward-looking security strategies. More: https://cybersecurity-insiders.com

About Cogility

Cogility’s continuous Decision Intelligence Platform, Cogynt, provides an advanced decision intelligence and decision support streaming analytic solution for government and commercial organizations — allowing our customers to get left of harm or ahead of opportunity. A cloud-scalable, proven solution, Cogynt enables organizations to efficiently and effectively manage complex intelligence challenges with high-confidence, predictive, and explainable insights required to become proactive versus reactive in highly complex and high consequence environments. To learn more, users can visit www.cogility.com.

Contact

Head of Research
Holger Schulze
Cybersecurity Insiders
[email protected]


文章来源: https://securityboulevard.com/2025/11/2025-insider-risk-report-finds-most-organizations-struggle-to-detect-and-predict-insider-risks/
如有侵权请联系:admin#unsafe.sh