Cybersecurity Versus Hackers: Who Is Winning?

At InfoSecurity Europe 2025, cybersecurity leaders were asked a pressing question: Who currently holds the advantage, cybersecurity or cybercriminals?

While there was optimism about trends, according to a Tech Radar article, most experts agreed that hackers still have the upper hand. The event showcased how AI, evolving strategies, and regulatory improvements are reshaping the fight, but also highlighted the persistent challenge of staying ahead in an asymmetric battle.

The cybersecurity landscape has long been reactive. Experts from organizations such as Semperis, Sonatype, and ZeroFox noted that defenders often lag behind attackers, who continuously develop novel threats.

Cybercriminals, unburdened by ethical constraints, can act with speed and freedom. Meanwhile, security professionals must navigate regulations and moral considerations.

The gap widens further as AI becomes more accessible to threat actors, enabling less technically skilled individuals to launch sophisticated attacks.

Despite this, a shift may be underway. Speakers from companies like Okta, Hadrian, and Darktrace emphasized that AI is also being adopted by defenders to anticipate and counter threats more effectively.

Increased regulatory awareness and stronger governmental support are improving the defensive posture across industries. The consensus was that while attackers may strike first, defenders are becoming better equipped to respond quickly and intelligently.

The conversation, broadly construed, provides insights into how cybersecurity litigation is likely to evolve. Counsel advising on cybersecurity will need to stay informed about AI-driven countermeasures and liability considerations related to their use, or the lack thereof.

Corporate boards need to be reminded about the importance of attention to security failures. Lawyers have a pivotal role in guiding clients in an environment where both attackers and defenders are increasingly powered by AI.