What do we think threat actors target for next 3-5 years

I was having a conversation with the boss the other day. We were trying to think about where we could apply effort proactively to attempt to stay ahead of vulnerabilities over the coming years. We were thinking conceptually of quantum cryptography, API security, AI written code issues, virtualized hardware vulnerabilities, etc. What do you all think will be next?

api api security boss code coming conversation cryptography cybersecurity hardware next quantum quantum cryptography security target thinking threat threat actors vulnerabilities written