Title: Emerging Cybersecurity Threats and Digital Resilience
Authors: Dr Neha Paliwal
Volume: 10
Issue: 9
Pages: 171-191
Publication Date: 2026/09/28
Abstract:
The rapid digitalisation of organisations has transformed cybersecurity from a specialised information-technology function into a strategic requirement affecting business continuity, privacy, economic stability, public services, and national resilience. Cloud computing, artificial intelligence (AI), mobile technologies, Internet of Things (IoT), digital payment systems, APIs, remote working, and interconnected software ecosystems have expanded the digital attack surface. At the same time, cybercriminals have increasingly adopted automated tools, credential theft, social engineering, vulnerability exploitation, ransomware, supply-chain compromise, and AI-assisted techniques. This study presents an updated analysis of emerging cybersecurity threats and proposes a multidimensional digital-resilience framework. The research uses the supplied foundational cybersecurity study as its conceptual starting point and extends its themes through contemporary secondary evidence. Recent cybersecurity reports are analysed to identify changes in threat frequency, attack pathways, organisational exposure, and defensive requirements. ENISA's 2025 Threat Landscape analysed 4,875 incidents from July 2024 to June 2025 and identified DDoS as the dominant incident type, while phishing accounted for approximately 60% of observed initial intrusion methods and vulnerability exploitation accounted for 21.3%. Verizon's 2025 DBIR analysed more than 22,000 incidents and 12,195 confirmed breaches, reporting a 34% increase in vulnerability exploitation, ransomware in 44% of breaches, and third-party involvement in 30% of breaches. IBM's 2025 research further indicates a substantial AI governance gap: 13% of organisations in its studied population reported breaches involving AI models or applications, while 97% of those reporting AI-related incidents lacked appropriate AI access controls. Based on these findings, the study proposes an integrated security model combining identity protection, vulnerability management, cloud security, supply-chain assurance, AI governance, continuous monitoring, incident response, and recovery. The study concludes that effective cybersecurity should move beyond prevention toward continuous cyber resilience.