Risk Insights
May 20, 2026

The Threat Landscape Is Getting Harder — Here’s What Organizations Need to Know

Experts from RANE and Silobreaker recently convened in New York to assess an increasingly volatile threat environment. The picture that emerged is one of widening scope and worsening risk.

The world is in the middle of a structural shift — away from the relatively stable postwar order and toward a messier, more contested multipolarity. The borders drawn after World Wars I and II are fracturing. Geopolitical relationships have become grey zones. And for corporate security professionals, that uncertainty doesn’t stay abstract: it shows up in the threat landscape every day.

This analyst briefing made that connection explicit. Across two sessions, experts traced how macro-level instability is creating micro-level risk for organizations — and why the old frameworks for thinking about threats may no longer be sufficient.

“The drivers behind cyber threats aren’t new — it’s just new technology and tools providing new means to the same ends.”

 

KEY THEMES: Four forces reshaping corporate risk

Geopolitical fragmentation: A return to multipolarity creates ambiguous, hard-to-predict conflict zones that complicate security planning.

Technology as disruptor: AI, quantum computing, crypto, and more are reshaping both offensive capabilities and corporate exposure.

Expanding threat actors: Beyond the “big four” nation-states: cartels, middle powers, and other cyber actors are rising — and increasingly collaborating.

Anti corporate sentiment: AI is a polarizing flashpoint. Companies face rising grievance-driven threats including doxxing, protests, and targeted violence.

 

EMERGING TECHNOLOGY: AI: threat amplifier and flashpoint

Artificial intelligence featured prominently throughout the briefing — but not in a single, simple role. On one hand, AI is accelerating attacker capabilities: enabling more sophisticated influence operations, scaling social engineering, and lowering the barrier to entry for threat actors. On the other, AI itself has become a source of corporate risk, fueling public grievance around job displacement, environmental impact, and data privacy. That grievance is a vector. Organizations developing or deploying AI face a specific and growing threat surface that blends reputational, physical, and cyber dimensions, even if AI also is providing some new tools for cyber defenders.

Quantum computing with the potential to break longstanding encryption drew attention as a longer-horizon disruptor — one with particular relevance to the U.S.-China technology competition. Experts flagged it as an area warranting early strategic attention, even if immediate operational impact remains limited.

 

THREAT CONVERGENCE: Physical and cyber: no longer separate problems

One of the session’s recurring themes was the blurring of what were once distinct threat categories. Physical and cyber vectors are increasingly converging — and so are the actors behind them.Threat actor groups that previously operated independently are now working together, broadening their combined reach and capability.

Insider threats are worsening, driven by a mix of financial motivation, ideology, coercion, and ego. And the Trump administration’s policy unpredictability was cited as a structural source of volatility — difficult to model, but impossible to ignore.

 

FORWARD OUTLOOK: What’s on the horizon

Major events — the World Cup, the U.S. semiquincentennial, and the midterm elections — create concentrated windows of elevated risk across supply chain, cyber, disinformation, and physical security domains.

The fraying global order is increasing the risk of inter- and intra-state conflict, while cyber attacks on critical infrastructure are becoming a growing concern.

Arctic ice melt is opening new competitive shipping routes, drawing in neighboring powers and adding a geopolitical dimension to logistics and supply chain planning.

Climate change was framed not as a standalone issue but as a threat multiplier — exacerbating instability, resource competition, and operational disruption across sectors.

 

PRIVATE SECTOR ROLE: The public-private gap — and the collaboration problem

A fireside conversation between David Lawrence and Geoff Brown addressed a structural tension: federal authorities have been weakened in their ability to coordinate responses to large-scale cyber threats, while meaningful capability has migrated to the private sector. The problem is that private-sector competition actively discourages the intelligence sharing that effective defense requires.Closing that gap — building collaborative structures in an environment defined by competition — was identified as one of the central challenges in the current threat environment.

The overall picture from the briefing is one of compounding complexity. Threats are broader, actors are more numerous, technology is accelerating change in both directions, and the institutional structures designed to manage risk are under strain. For security teams, the imperative is not just to respond to today’s threats — but to build the organizational agility to adapt to ones that haven’t fully materialized yet.

For more informationon any of these topics, please contact RANE.