PSB held session “Proactive Cyber Defense. How Do Companies Anticipate Attacks in 2025?”

PSB organized a strategic session “Proactive Cyber Defense. How Do Companies Anticipate Attacks in 2025?” at the CIPR Digital Forum in Nizhny Novgorod. The discussion was attended by the heads of information security departments of large Russian businesses and state-owned companies, as well as developers of domestic solutions in the field of cybersecurity. The session was moderated by Dmitry Miklukho, Senior Vice President and Director of the Information Security Department of PSB.

The participants have noted that the intensity and complexity of the threats is increasing — attackers are improving methods and technologies of attacks on the financial sector and organizations in other industries. Hackers are actively exploiting supply chain vulnerabilities, using AI to create malicious code and phishing sites, and looking for ways to bypass modern security systems.

Experts shared their experience in repelling cyber attacks and approaches to implementing proactive protection. In particular, they discussed the use of artificial intelligence in information security and the use of Cyber Deception, a proactive cybersecurity technology that allows not only detecting and blocking attacks, but also intentionally creating fake dynamic infrastructure to “lure” an attacker, study attacker’s behavior, extend response time and protect real resources.

At the end of the discussion, the experts raised the issue of human resources in information security: the shortage of high-level qualified specialists who are able to confront today’s challenges. The participants in the discussion agreed that it is necessary to engage with young people at universities and build training programs in accordance with specific modern practical cases faced by companies.

“Organizations are currently facing important strategic challenges – ensuring digital sovereignty, introducing artificial intelligence into security systems, proactive cyber defense, and addressing staffing shortages. These issues are extremely relevant for Russia: companies and organizations need to regularly strengthen their information security in the face of increasing attacks, which are becoming more widespread and technologically advanced. During the strategy session, my colleagues and I shared our experiences and discussed how to deal with these challenges, which strategies really work, and what lies ahead. In my opinion, such meetings help the entire industry to become stronger and raise the overall level of information security,” noted Dmitry Miklukho.