BT Exec: AI Risks Continue to Surge in Cybersecurity

Share
Tris Morgan, Managing Director of Security at BT
BT's security chief warns of AI-driven attacks, emphasising the need for operational resilience as new EU regulations reshape the security landscape

BT Group, the UK’s largest telecommunications provider, processes 2,000 signals of potential cyber attacks every second, equivalent to 200 million daily threats. 

Such a stark revelation comes as AI continues to create new security vulnerabilities for organisations around the world.

Tris Morgan, Managing Director of Security at BT, explains that such a large scale of threats means cybersecurity skills will become essential for businesses in 2025. 

"There is an existing stereotype that cybersecurity is too hard to understand. But you don't need to be born a cybernaut to understand it, or even master it," he says.

The warning comes as cybercriminals develop increasingly sophisticated tactics, including AI-driven phishing attacks – fraudulent attempts to obtain sensitive information by disguising as trustworthy entities – and malware, software specifically designed to disrupt computer systems.

Opportunities and risks

According to Tris, the rise of AI is creating both opportunities and risks for corporate security teams. AI-powered learning platforms and no-code security tools, which allow users to create applications without writing code, will help address the skills shortage.

Youtube Placeholder

The security executive also predicts 2025 will mark a significant shift in how organisations approach cyber security training. Recent technological advances, including threat simulation systems that replicate real-world attacks, will enable more workers to develop cyber security expertise.

However, he warns that employees using AI tools on personal devices risk exposing sensitive corporate data, saying: "Many businesses overlook risks when opting for convenience."

Likewise, the proliferation of AI applications across business operations means companies must increase scrutiny of data storage practices. 

Key facts
  • BT detects 2,000 potential cyber attacks every second across its networks
  • Daily cyber threat signals reach 200 million at BT's security operations
  • Six critical layers identified for operational resilience: physical infrastructure, network, hosting, applications, data and staff

This becomes particularly critical as organisations adopt multiple AI technologies across different departments.

Emphasising operational resilience

Tris emphasises that operational resilience – an organisation's ability to maintain critical functions during disruption – must be central to business planning in 2025.

"Throughout these six layers, businesses should take stock, and work out how they should best respond to a breach, and be fit to face the unexpected," he explains, referring to the key areas of physical infrastructure, network security, data hosting, applications, data protection and staff training.

European Union regulations including DORA and NIS2 will force companies to strengthen their cyber defences

New EU regulations including the Digital Operational Resilience Act (DORA) and Network and Information Security 2 (NIS2) directive will force companies to strengthen their cyber defences, according to Tris.

DORA, which targets financial institutions, and NIS2, focusing on critical infrastructure operators, represent significant regulatory changes in the European cybersecurity framework. 

While compliance may expose organisational weaknesses, Tris suggests these requirements will ultimately strengthen industry-wide resilience.

"Governments will play a pivotal role in shaping cybersecurity practices through regulations like the EU's DORA and NIS2," he says. "While these regulations will challenge businesses by exposing weaknesses, they will also help foster resilience across the industry."

Confronting a changing cyber landscape

The regulatory changes coincide with an increasing number of small and medium-sized enterprises (SMEs) moving to digital-first business models. These businesses face particular challenges as they often lack dedicated security resources while managing growing cyber threats.

The transition requires SMEs to develop comprehensive recovery plans and maintain strong digital hygiene – basic security practices including regular software updates and secure password management.

BT’s data indicates the scale of cyber threats continues to grow

"Even small businesses transitioning to digital-first models will better understand the importance of digital hygiene and recovery plans to combat the growing threats," Tris adds.

BT's data indicates the scale of cyber threats continues to grow, highlighting the urgency for organisations to develop internal security capabilities. 

Tris believes technological advances will make security expertise more accessible across organisations.

"Recent advances in technology, such as AI-powered learning platforms, no-code/low-code security tools and threat simulation and detection systems, will help people to upskill, deepen their understanding and work in these domains,” he notes.

“This means 2025 will be the year we crack the skills conundrum with the support of technology."


Explore the latest edition of Mobile Magazine and be part of the conversation at our global conference series, Tech & AI LIVE and Cloud & 5G LIVE

Discover all our upcoming events and secure your tickets today.


Mobile Magazine is a BizClik brand

Share

Featured Articles

This Week's Top Stories in the Telco Industry

Mobile Magazine highlights the most transformative stories to impact the telecommunications sector within the first week of February 2025

How Nokia is Powering Orange France’s 5G Network Expansion

Telco giants Nokia and Orange France extend long-term partnership with a new 5G deal, upgrading Orange France radio infrastructure with Nokia’s AirScale

We Are LIVE NOW - Cloud & 5G LIVE

Join us today and discover the latest challenges, trends and best practices shaping the Cloud and 5G landscape

Cloud & 5G LIVE - One Day to Go

5G & IOT

DE-CIX Selects Nokia to Deliver New York Exchange Upgrade

Connectivity

EU Tech Consortium set to Tackle 6G Environmental Impact

Sustainability