TL;DR: 2023 threat activity is likely to blend hacktivist, criminal and nation-state tradecraft, while quantum risk, medical device exploitation, insurance targeting and malicious AI tooling all widen the attack surface, according to Nozomi Networks Labs. The governance challenge is no longer classification alone but faster control validation across OT, IoT and identity-adjacent workflows.
Editorial analysis by NHI Mgmt Group, based on content published by Nozomi Networks: “Be On the Lookout for These New Cybersecurity Threats in 2023”.
Key questions
Q: How should security teams respond when attacker tactics blend criminal and nation-state tradecraft?
A: Treat attribution as useful context, not the first control decision.
Q: What makes unsupported medical devices so difficult to secure?
A: Unsupported devices are hard to secure because their vulnerabilities persist after vendor support ends, while the surrounding clinical workflow still depends on their data and availability.
Q: Why do AI-generated phishing attacks change human identity controls?
A: They reduce the value of message inspection as a control because attackers can now generate persuasive, context-aware lures at scale.
Practitioner guidance
- Strengthen detection for hybrid intrusion patterns Tune monitoring to catch campaigns that mix criminal extortion, ideological disruption and state tradecraft in the same incident path.
- Inventory unsupported medical devices Identify legacy devices and the monitoring systems they feed so you can assess where unsupported software creates safety and availability risk.
- Harden identity controls against AI-assisted phishing Prioritise phishing-resistant authentication, account recovery governance and user verification steps that do not rely on message tone or grammar.
Bottom line: The article frames 2023 threat activity as a convergence problem, not a single new malware or exploit trend.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →