2025 Thales Data Threat Report Reveals Nearly 70% of Respondents in India Identify AI's Fast-Moving Ecosystem as Top GenAI-Related Security Risk
In India, 68% of respondents identify future encryption compromise as one of the major concerns among quantum computing security threats.
Globally, malware remains the top attack type since 2021; phishing rises to second, and ransomware drops to third.
Thales today announced the release of the 2025 Thales Data Threat Report , its annual report on the latest data security threats, trends, and emerging topics based on a survey conducted by S&P Global Market Intelligence 451 Research of more than 3,100 IT and security professionals in 20 countries across 15 industries. This year's report found that nearly 70% of organisations in India view the fast-moving ecosystem as the most concerning GenAI security risk, followed by lack of integrity (66%) and trustworthiness (55%).
This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20250520591143/en/
©Thales
The 2025 Thales Data Threat Report results reveal a major focus on the transformative impact of AI, especially GenAI, which relies heavily on high-quality, sensitive data for functions like training, inference, and content generation. As agentic AI emerges, ensuring data quality becomes even more critical for enabling sound decision-making and actions by AI systems. Many organisations across the world are already adopting GenAI, with a third of respondents indicating it is either being integrated or is actively transforming their operations.
Organisations Embrace GenAI, Taking on Greater Security Risks Amid Rapid Adoption
As GenAI introduces complex data security challenges and offers strategic opportunities to strengthen defences, its growing integration marks a shift among organisations from experimentation to more mature, operational deployment. While most respondents said rapid adoption of GenAI is their top security concern, respondents in the more advanced stages of AI adoption aren't waiting to fully secure their systems or optimise their tech stacks before forging ahead. Because the drive to achieve rapid transformation often outweighs efforts to strengthen organisational readiness, these organisations may be inadvertently creating their own biggest security vulnerabilities.
'The fast-evolving GenAI landscape is pressuring enterprises to move quickly, sometimes at the cost of caution, as they race to stay ahead of the adoption curve,' Eric Hanselman, Chief Analyst at S&P Global Market Intelligence 451 Research, said. 'Many enterprises are deploying GenAI faster than they can fully understand their application architectures, compounded by the rapid spread of SaaS tools embedding GenAI capabilities, adding layers of complexity and risk.'
In India, 72% of respondents report investing in GenAI-specific security tools, with 16% using newly allocated budget. Globally, those prioritising AI security are diversifying their approaches: over two-thirds have acquired tools from their cloud providers, three in five are leveraging established security vendors, and nearly half are turning to new or emerging startups. Notably, security for generative AI has quickly risen as a top spending priority, securing the second spot in ranked-choice voting, just behind cloud security. This shift underscores the growing recognition of AI-driven risks and the need for specialised defences to mitigate them.
Data Breaches Show Modest Decline, Though Threats Remain Elevated
While data breaches remain a significant concern, their frequency has slightly decreased over the past few years. In 2021, 56% of surveyed enterprises across the world reported experiencing a breach, but that figure has dropped to 45% in 2025. Additionally, the percentage of respondents reporting a breach within the last 12 months has fallen from 23% in 2021 to just 14% in 2025. In India, 11% of respondents reported experiencing a data breach recently.
Globally, malware continues to lead as the most prevalent threat, maintaining its top position since 2021. Phishing climbed to second place, overtaking ransomware, which now ranks third. When it comes to the most concerning threat actors, external sources dominate—hacktivists hold the top spot, followed by nation-state actors. Human error, while still significant, has dropped to third, down one position from the previous year.
Vendors Pressed on Post-Quantum Readiness as Encryption Strategies Are Reassessed
The 2025 Thales Data Threat Report reveals that most organisations are increasingly concerned about quantum-related security risks. The top threat, cited by 68% of respondents in India, is future encryption compromise—the risk that quantum computers could eventually break current or future encryption algorithms, exposing data once considered secure. Close behind, 56% identified key distribution vulnerabilities, where quantum advancements could undermine the secure exchange of encryption keys. Additionally, 58% highlighted the 'harvest now, decrypt later' (HNDL) threat, where encrypted data intercepted today could be decrypted in the future. In response, 55% of organisations in India are prototyping or evaluating post-quantum cryptography (PQC) solutions, and 49% are assessing their encryption strategies. Only 40% are placing their trust in telecom or cloud providers to manage the transition.
'The clock is ticking on post-quantum readiness. It's encouraging that three out of five organisations are already prototyping new ciphers, but deployment timelines are tight and falling behind could leave critical data exposed,' Todd Moore, Global Vice President, Data Security Products at Thales, said. 'Even with clear timelines for transitioning to PQC algorithms, the pace of encryption change has been slower than expected due to a mix of legacy systems, complexity, and the challenge of balancing innovation with security.'
While this year's survey results indicate improvements in security posture, much more is needed to elevate operational data security to fully support the capabilities of emerging technologies such as GenAI and to pave the way for future innovations.
For more information please join our webinar hosted by Eric Hanselman, Chief Analyst at S&P Global 451 Research.
About Thales
Thales (Euronext Paris: HO) is a global leader in advanced technologies for the Defence, Aerospace, and Cyber & Digital sectors. Its portfolio of innovative products and services addresses several major challenges: sovereignty, security, sustainability and inclusion.
The Group invests more than €4 billion per year in Research & Development in key areas, particularly for critical environments, such as Artificial Intelligence, cybersecurity, quantum and cloud technologies.
Thales has more than 83,000 employees in 68 countries. In 2024, the Group generated sales of €20.6 billion.
About Thales in India
Present in India since 1953, Thales is headquartered in Noida and has other operational offices and sites spread across Delhi, Gurugram, Bengaluru and Mumbai, among others. Over 2200 employees are working with Thales and its joint ventures in India. Since the beginning, Thales has been playing an essential role in India's growth story by sharing its technologies and expertise in Defence, Aerospace and Cyber & Digital sectors. Thales has two engineering competence centres in India – one in Noida focused on Cyber & Digital business, while the one in Bengaluru focuses on hardware, software and systems engineering capabilities for both the civil and defence sectors, serving global needs. The Group has also established an MRO (Maintenance, Repair & Overhaul) facility in Gurugram to provide comprehensive avionics maintenance and repair services to Indian airlines and support the growth of the local aviation industry.
PLEASE VISIT
Thales Group
Cloud Protection & Licensing Solutions | Thales Group
Cybersecurity Solutions | Thales Group
View source version on businesswire.com: https://www.businesswire.com/news/home/20250520591143/en/
Disclaimer: The above press release comes to you under an arrangement with Business Wire. Business Upturn takes no editorial responsibility for the same.
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Boston Globe
28 minutes ago
- Boston Globe
AI will bring back old boys' clubs
Get The Gavel A weekly SCOTUS explainer newsletter by columnist Kimberly Atkins Stohr. Enter Email Sign Up When the ability to expediently undertake honest evaluation eludes us, we intuitively default to a next-best shortcut: pedigree. Expect a resurgence of reliance on status symbols we may have thought the world was beginning to leave behind — elite diplomas, warm intros, old-fashioned references, a person's ZIP code, race, gender, and maybe even their given and family names. One of the early, wide-scale effects that generative AI will have on labor and capital markets is the return of velvet ropes. Advertisement The logic dates way back. If an artifact's authenticity is in question, validate the artisan by their tribe. We'll see these changes all over. Foundations such as Wellcome Trust are accepting applications for grants from 'established researchers.' It'll go unsaid, but universities will rely more heavily on PhD program rankings when they recruit faculty. Admissions officers who had begun to move away from standardized test scores may now grasp onto any numerical indicators that still seem to justifiably sort applicants, even if only by a hair's breadth. Law firms that started to lean toward 'school-agnostic' hiring policies will reverse course. Advertisement This is cognitive triage rather than malice. AI already is doing many wonderful things for us, but it has massively diluted our ability to assess talent and verify authenticity. So gatekeepers everywhere are going to look for logos. In the near term, that will tilt the playing field further away from anyone who lacks status markers. It'll be no surprise if a first-generation college applicant from Fresno whose personal essay might be AI assisted faces more doubt than a legacy or Andover kid who is presumptively the better writer. Likewise, a midcareer coder in Belgrade whose work shows well on GitHub will meet greater suspicion than an MIT grad with a referral, even if both their code repositories were mostly generated with the help of Copilot. The same technology that promises to democratize education, enlarge the circle of creators and productive workers, and equalize talent in the workplace will, ironically, refeudalize selection and recognition in the near term. Whether we end up in a world of more distributed opportunity or more unexamined pedigree may depend on our appetite for doing the harder work of verification or on our willingness to treat outputs of artificial or of human creators as one and the same. Until we acknowledge the latter or we develop new methods to assess and authenticate human capability in an AI-saturated world, the democratic potential of these technologies will be overshadowed by the hierarchies they otherwise might have helped to dissolve. Advertisement
Entrepreneur
28 minutes ago
- Entrepreneur
Presight and Abu Dhabi Police to Drive AI-Enabled Law Enforcement and Smart City Innovation
The partnership will accelerate the deployment of intelligent systems that enable proactive crime prevention, real-time threat detection, digital forensics, and predictive analytics. You're reading Entrepreneur Middle East, an international franchise of Entrepreneur Media. Presight, an ADX-listed public company with Abu Dhabi-based G42 as its majority shareholder, has entered a strategic cooperation agreement with Abu Dhabi Police General Headquarters (GHQ) to develop cutting-edge artificial intelligence technologies for law enforcement. The collaboration aims to integrate the capabilities of Presight's AI-Policing Suite – a modular, future-ready solution that leverages Generative AI, AI agents, and advanced data analytics – with Abu Dhabi Police's operational excellence to address modern challenges in policing and smart city development. The partnership will accelerate the deployment of intelligent systems that enable proactive crime prevention, real-time threat detection, digital forensics, and predictive analytics. Attending the ceremony were His Excellency Ahmed Saif bin Zaitoon AlMheiri, Commander-General of Abu Dhabi Police, His Excellency Mansoor Al Mansoori, Member of the Abu Dhabi Executive Council, Chairman of the Department of Health - Abu Dhabi, and Vice Chairman of Presight; Thomas Pramotedham, CEO of Presight; and Dr Adel Al Sharji, COO of Presight, and Mohammed AlMheiri, Chief Business Officer - Public Safety & Security. Major General/Engineer Nasir Sultan Al-Yabhouni, Director of the Leadership Affairs Sector at Abu Dhabi Police, said, "Our partnership with Presight helps us benefit from world-leading artificial intelligence technologies that will enhance our policing capabilities and take them to new heights. This collaboration supports our efforts to maintain public safety through innovation, which means strengthening our officers' ability to respond faster, make smarter decisions, and make Abu Dhabi a safer and more secure place." Mohammed AlMheiri, Chief Business Officer - Public Safety & Security, Presight, said, "This strategic agreement marks a pivotal moment in the evolution of AI-driven public safety. Presight, together with Abu Dhabi Police, are enabling a new era of proactive, data-driven law enforcement, which will drive a shift towards applied intelligence-led policing defined by enhancements in decision-making and operational agility. Our platform's intelligent digital investigator, real-time threat detection, and predictive analytics capabilities empower officers to anticipate and respond to challenges with unprecedented speed and precision. Together, we are shaping a future where cities are not only smarter, but fundamentally safer." This strategic alliance supports the transformation of public safety infrastructure, enabling enhanced decision-making and streamlined emergency response. The joint efforts will also explore innovative models to modernize law enforcement practices, emphasizing ethical AI usage and data-driven policing. The partnership is a significant step forward in realizing Abu Dhabi's vision of a future-ready, AI-enabled smart nation, reinforcing its position as a global leader in technology adoption and urban safety.
Digital Trends
28 minutes ago
- Digital Trends
Web browsers are entering a new era where AI skills take over from extensions
'The browser is bigger than chat. It's a more sticky product, and it's the only way to build agents. It's the only way to build end-to-end 'workflows,' these were the comments of Perplexity CEO, Aravind Srinivas, in a recent interview. The Perplexity co-founder was talking about the future of web browsers, AI agents, and automations in web browsers. Srinivas was bullish on the prospects, partly because his company is already testing a buzzy new browser called Comet. Currently in an invite-only beta phase, the browser comes with an agent that can handle complex and time-consuming tasks on your behalf. Recommended Videos Think of it like an AI tool such as ChatGPT or Gemini, but one that lives exclusively in your browser. The agent-in-browser approach, as Srinivas argues, is more familiar and flexible. You don't have to deal with the usual local permission and cross-app workflow restrictions. Plus, browsers will work just the way we're used to, with products like Chrome or Safari. But the undercurrents are wildly different, and the biggest change could be the sunsetting of browser extensions in favor of AI skills and user-generated agents. Interestingly, the foundation tools were laid over a year ago, but we are only hearing about them with the arrival of AI-first browsers like Dia and Comet. AI skills are the new work champions All the talk of AI agents and skills sounds like a bunch of tech jargon, so let me break it down for you. In the Dia browser, I recently created a skill called 'expand.' How did I do it, even though I didn't write a single line of code? I simply described it in the following words: 'When I use this skill and paste a snippet, do a deep web search, and pull up the entire history in the form of an article in a timely order. Pull information only from reliable news outlets.' I read and write articles for a living, and I often come across snippets and events in articles that I am not familiar with. For such scenarios, all I have to do is select the relevant text (or copy-paste it in the chat sidebar) and use a '/' command to summon the 'expand' skill. As described above, the AI agent in the Dia browser will search the mentions of my target in top news outlets and create a brief report about it in chronological order. This saves me a lot of precious time that would otherwise be spent on wild Google Search attempts. But more importantly, I don't even have to open another tab, and I can ask follow-up questions in the same chat box within the active reading tab. It's quick and convenient. I don't know an extension that can do exactly what this 'expand' skill does for me. It's not possible either. I created it with a specific purpose and intent. And I can create as many as I want, or fine-tune it further to suit my workflow. I've created another one called 'research' that references a work (or phrase) and performs web research by looking exclusively at peer-reviewed science papers. The Dia user community is even saving some money by creating skills that hunt for coupon codes available on products right before checkout. For my Amazon shopping, I've created one that combines the reviews, ratings, and features of products across different Amazon tabs, creates a comparison table, and helps me make the best choice. All of that happens by typing a single word! Another one quickly looks up for grammatical errors and style guide clarity in my emails. There's one that creates a quiz-based reading material for kids I teach at a nearby non-profit institution, based on the learning material I have prepared. Just made a @diabrowser skill that instantly saved me money — Egor (@eg0rev) July 23, 2025 The students love the fun and playful tone in their multiple-choice questions that test their current affairs knowledge. There's even an official Dia gallery where you can find skills created by Dia users, and a crowd-sourced web dashboard where you can find even more. But here's the main reason why I think browser skills are a bigger deal than extensions. Anyone can create them by simply describing what they want. With extensions, you need coding knowledge and basic skills of how the web and its browsing architecture work. Security is another reason that I would put more faith in browser skills than extensions. There is a long history of browser extensions being weaponized but bad actors to seed malware. An average user can't look or make sense of an extension's inner workings, and only realizes the folly when the damage has been done. The situation with AI skills in browsers is as transparent as it gets. How exactly a skill works is described in detail, in natural language, and without any hidden caveats. You just need to read it thoroughly, or just copy-paste it and create your own with extra modifications. That approach is flexible, a lot safer, and gives the whole power in users' hands. Browser agents are here to stay Next, we have browser agents. Opera browser has already implemented one, and it is already offering a more advanced version called Operator. Then you can have tools like ChatGPT Agent, and Perplexity's Comet browser. Think of it as Siri, but for web browsing. Agents are more suited for complex, time-consuming tasks. And they work best when they get access to the services you visit on a daily basis, like your email and Calendar. For example, this is what I did in Perplexity's Comet browser last night: 'Check my inbox and give me an update on all the interview requests with a scientist or company executive that I intended to proceed with. Focus on conversations where I expressed the possibility of virtual interviews, instead of an in-person meeting.' Without opening another tab, the built-in Assistant went through my Gmail inbox, looked up the relevant emails, and then provided me with a list of such interactions in a well-formatted view. For added convenience, it even included one-click Gmail links so that I can directly open that email chain without having to manually dig in. It's great for a lot of other things. For example, during a Twitter AMA, I simply asked it to pick the responses by the speaker and list them as bullet points. That saved me a lot of back-and-forth time opening and closing X conversation chains. For travel planning, shopping, or even consuming videos, the assistant in Comet browser works fine. The only 'ick' is that if you need it to get more personal work done, you will need to provide access to connectors. For example, to handle your Gmail, Calendar, and Drive, you will need to enable access. I did it for my WhatsApp account, as well, and it worked really well in the Comet browser. Not everyone will feel easy doing that, and the caution is totally warranted. For such scenarios, Google and OpenAI offer similar agentic features for Gemini and ChatGPT, respectively. There is no going back Just the way you create skills in Dia by simply typing or narrating your requirements, Gemini and ChatGPT also let you create custom agents for specific tasks. Google calls them Gems, while OpenAI refers to them as GPTs. And yes, you can share them just like skills. Using them is free, but to create them, you'll need a subscription that costs $20 per month. I've created numerous Gems and custom GPTs to speed up my mundane chores. For personal social posting, I've created a Gem that breaks down articles I've written into smaller bits, which are then posted as a chain on X. Likewise, I've created custom agents to handle my emails. One of the Gems simply needs me to type 'yes' or 'no,' and it will accordingly write a polite response while picking up all the context from the email. With connectors coming into the picture, you can link them to as many services as you want. The best part about these gems is that you can effortlessly use them across a desktop browser and mobile apps, as well. Extensions require you to stick with a desktop browser. Some mobile browsers do support extensions, but they are rare. Moreover, they don't offer the same flexibility and peace of mind as custom browser skills or agents created by users. ChatGPT Agent and Google's Project Mariner are a new breed of AI assistants that are tailor-made for web-based tasks, just like the assistant built within Perplexity's Comet browser. Unlike an extension, they can handle multi-step workflows, and you can take over at any stage. Furthermore, you can modify the inner workings of your web browsing automation and tailor the AI skills to your exact specifications, something that's not possible with extensions. Of course, they are not perfect. At the same time, you can take over it and complete the things when it's not able to do it because no AI agent is foolproof, especially when we are at a time when reasoning models are still far from perfection,' admits Perplexity's CEO. But the shift is clearly evident. Browser extensions are not going to vanish overnight, but browsing agents and AI skills created by users are going to take over. It's only a matter of time before the barriers (read: subscription fee) come down!
