WatchGuard Threat Lab Analysts Release 2024 Cybersecurity Predictions

WatchGuard Technologies has released its 2024 Cybersecurity Predictions, covering the most prominent attacks and security trends anticipated by their research team for the coming year.

“Every new technology trend opens up new attack vectors for cybercriminals,” said Corey Nachreiner, chief security officer at WatchGuard Technologies. “In 2024, the emerging threats targeting companies and individuals will be even more intense, complicated, and difficult to manage. With an ongoing cybersecurity skills shortage, the need for MSPs, unified security, and automated platforms to bolster cybersecurity and protect organizations from the ever-evolving threat landscape have never been greater.”

Among the highlights, companies and individuals are experimenting with large language models (LLMs) to increase operational efficiency. But threat actors are learning how to exploit LLMs as well. During 2024, the WatchGuard Threat Lab predicts that a smart prompt engineer ‒ whether a criminal attacker or researcher ‒ will crack the code and manipulate an LLM into leaking private data.

In addition, with approximately 3.4 million open cybersecurity jobs, and fierce competition for the talent that is available, more small- to midsized companies will turn to trusted managed service providers and security service providers to protect them in 2024. To accommodate growing demand and scarce staffing resources, MSPs and MSSPs will double down on unified security platforms with heavy automation using artificial intelligence (AI) and machine learning (ML).

Cybercriminals can already buy tools on the underground that send spam email, automatically craft convincing texts, and scrape the Internet and social media for a particular target’s information and connections, but a lot of these tools are still manual and require attackers to target one user or group at a time. Well-formatted procedural tasks like these are perfect for automation via artificial intelligence and machine learning, making it likely that AI-powered tools will emerge as best sellers on the dark web in 2024.

While VoIP and automation technology make it easy to mass dial thousands of numbers, once a potential victim has been baited onto a call, it still takes a human scammer to reel them in. This system limits the scale of vishing operations. But in 2024 this could change. WatchGuard predicts that the combination of convincing deepfake audio and LLMs capable of carrying on conversations with unsuspecting victims will greatly increase the scale and volume of vishing calls. What’s more, they may not even require a human threat actor’s participation.

Virtual and mixed reality (VR/MR) headsets are beginning to gain mass appeal. However, wherever new and useful technologies emerge, criminal and malicious hackers follow. In 2024, Threat Lab researchers forecast that either a researcher or malicious hacker will find a technique to gather some of the sensor data from VR/MR headsets to recreate the environment users are playing in.

While quick response (QR) codes have been around for a long time, mainstream usage has exploded in recent years. Threat Lab analysts expect to see a major, headline-stealing hack in 2024 caused by an employee following a QR code to a malicious destination.

Channel Impact^®
These predictions give a heads up to channel partners looking to raise their game in the IT security space, and determine where to invest resources and training as well as sales activities.