Infosecurity Europe 2025 Highlights Evolving Threats and Key Cybersecurity Trends Infosecurity Europe 2025 brought together industry experts to address pressing cybersecurity challenges, with a strong emphasis on foundational defenses amid rapid technological change. Among the most critical trends discussed were the evolution of social engineering tactics, the persistent threat of credential compromise, and the need for frictionless security measures. Social Engineering Shifts to Phone-Based Attacks Threat actors are increasingly leveraging phone calls—either alone or alongside phishing emails—to deceive employees into divulging credentials. Erhan Temurkan, Technology & Security Director at Fleet Mortgages, warned of scams impersonating IT departments, urging password resets. These attacks are harder to block than email phishing, as organizations cannot easily filter legitimate calls. Deepfake technology has further amplified the risk, making fraudulent calls nearly indistinguishable from trusted voices. To counter this, experts recommend implementing multi-factor authentication (MFA) with pre-agreed passcodes or phrases as an additional layer of defense. Credential Theft Remains a Top Threat Research from Rapid7 revealed that 56% of compromises in Q1 2025 stemmed from stolen credentials, often due to the absence of MFA. Thom Langford, CTO for EMEA at Rapid7, emphasized that attackers frequently exploit basic weaknesses, such as tricking users into surrendering login details. Cloud environments are particularly vulnerable, with SaaS account takeovers serving as a common entry point for privilege escalation. While MFA is essential, SMS-based 2FA is increasingly risky due to SIM-swapping attacks. Temurkan urged organizations to adopt phishing-resistant MFA, such as FIDO2-compliant biometrics or physical security keys, which have become more accessible. Balancing Security and Usability Security leaders stressed the importance of minimizing friction in cybersecurity measures to ensure employee compliance. Langford noted that excessive controls can hinder productivity, making user experience a critical consideration. Passwordless authentication, biometrics, and single sign-on (SSO) were highlighted as solutions that enhance security without disrupting workflows. Temurkan underscored the need for the industry to prioritize usability while strengthening defenses, ensuring that security measures remain effective without becoming burdensome.