Loading story…
The cybersecurity sector is undergoing significant transformation as organizations increasingly adopt artificial intelligence (AI) and generative AI tools to enhance security operations. Security teams are leveraging AI for tasks such as forensics, incident response, log analysis, and vulnerability management, which is fundamentally changing how cybersecurity work is performed. This shift is driving CISOs to rethink team structures and workflows, with a focus on upskilling and automating routine tasks to improve efficiency and allow professionals to concentrate on more complex challenges.
Despite the benefits of AI integration, the industry faces persistent workforce challenges. Skills shortages have overtaken headcount as the primary concern, with many organizations struggling to find and afford professionals with the expertise needed to secure increasingly complex environments. Budget constraints remain a significant barrier, and while economic conditions are stabilizing, the gap between available skills and organizational needs continues to grow. The demand for specialized roles, such as security architects for cloud environments, is rising as companies accelerate cloud adoption and seek to bolster their security posture in the face of evolving threats.
Track how attackers are adapting to this technology.
6 events from the most recent confirmed update back to the earliest known activity.
A joint ISSA and Omdia study reported that AI adoption in cybersecurity is widespread, but many practitioners said their jobs had become harder as complexity, workload, attack surfaces, and threats increased. The survey highlighted persistent burnout, stress, and retention risk, with many respondents considering leaving their roles and researchers warning that AI alone will not solve the skills gap without stronger investment in training and career development.
By early 2026, industry coverage emphasized that cybersecurity teams were struggling more with skills shortages than raw headcount, especially in AI and cloud security. Organizations were reported to be accelerating upskilling efforts while many still lacked mature AI, data, and cloud security controls.
Organizations increasingly integrated generative AI into security operations to automate repetitive tasks, augment SOC work, and improve productivity. This also created demand for skills in AI governance, prompt engineering, and data science while reinforcing the need for human oversight.
As cloud adoption accelerated, organizations added or emphasized roles such as security architects, security engineers, cloud governance and compliance managers, DevOps engineers, FinOps practitioners, and site reliability engineers. This reflected a broader effort to secure, govern, and optimize increasingly complex cloud environments.
ISC2's 2025 Cybersecurity Workforce Study, based on more than 16,000 professionals, identified skills gaps rather than headcount as the leading workforce concern. The study highlighted AI and cloud security as the most urgent skills needs and linked staffing and budget shortfalls to significant cybersecurity events.
Foundry's 2025 CIO Cloud Computing Study found that 70% of IT decision-makers reported increased cloud migration over the prior year. The shift was described as driving demand for roles in cloud security, governance, and cost optimization.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
4 references tracked. Mallory keeps watching after this page renders.
reversinglabs.com
Open sourcecsoonline.com
Open sourcecsoonline.com
Open sourcecio.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Cybersecurity leaders are facing a rapidly evolving threat landscape shaped by the integration of artificial intelligence (AI) into both attack and defense strategies. According to a report from VikingCloud, 71% of surveyed security leaders have observed an increase in the frequency of cyberattacks over the past year, with 61% noting that the impact of these incidents has also grown. Nation-state actors are increasingly targeting a broader range of industries, including retail, healthcare, and hospitality, often leveraging AI to scale their operations and exploit third-party software vulnerabilities. The use of generative and agentic AI by attackers has enabled more sophisticated phishing, social engineering, and ransomware campaigns, with deepfakes and voice-based fraud becoming more prevalent. Security leaders report that AI is now commonly used to automate the creation of polished, linguistically sophisticated phishing emails, making them harder to detect and more convincing to recipients. Attackers are also targeting AI assistants embedded in workplace tools, using malicious prompts hidden in emails to manipulate these systems into leaking sensitive information or executing unauthorized actions. Research from Columbia University and the University of Chicago, as well as Barracuda Research, has documented how attackers exploit weaknesses in AI-driven security tools and tamper with systems that use retrieval-augmented generation (RAG), leading to unreliable outputs and poor decision-making. Despite these challenges, organizations are increasingly adopting AI to bolster their defenses, automating threat detection, identity management, and patching to free up security teams for more strategic tasks. However, a significant skills gap persists, as highlighted by the AI Workforce Consortium, which found that AI technical skills are now required across 50 job roles in ICT, yet the market lacks enough professionals with these capabilities. The demand for expertise in areas such as LLM architecture, prompt engineering, and generative AI is outpacing supply, putting additional pressure on security teams. Security leaders are also concerned about reduced government oversight, with many citing cuts to agencies like CISA and NSA as factors that have increased organizational vulnerability. The interplay between AI-driven attacks and defenses is creating new security, compliance, and governance challenges that organizations must address to safely deploy advanced AI systems. As both attackers and defenders race to leverage AI, the need for skilled professionals and robust governance frameworks has never been greater. The evolving threat landscape underscores the importance of continuous learning and adaptation for cybersecurity teams. Organizations must remain vigilant against AI-powered threats while investing in workforce development to close the skills gap. The integration of AI into cybersecurity is not only transforming technical requirements but also reshaping risk management and strategic decision-making at the highest levels.
Jun 29, 2026
Artificial intelligence is fundamentally reshaping the cybersecurity landscape, introducing both new opportunities and significant risks for organizations and professionals. The adoption of AI tools is accelerating the learning curve for cybersecurity practitioners, enabling faster skill acquisition, automated reconnaissance, and streamlined exploit generation, as highlighted by experts who advocate for integrating AI into bug hunting and security research workflows. However, this technological leap is also disrupting traditional career paths, with studies showing a marked decline in entry-level cybersecurity and IT jobs as AI automates routine tasks such as help desk support, manual testing, and security monitoring. Industry leaders emphasize the need for IT teams to adapt by acquiring new skillsets and focusing on strategic problem-solving, as the majority of job skills are expected to change dramatically by 2030 due to AI's influence. Concurrently, the rise of autonomous AI agents introduces a new class of security risks, as these systems possess the ability to make independent decisions, access sensitive data, and execute code across networks, often in ways that are opaque and difficult to audit. The lack of robust identity management and oversight for these agentic systems leaves organizations vulnerable to novel attack vectors, including black box attacks where the root cause of malicious or erroneous actions is nearly impossible to trace. Deepfake technology, powered by generative AI, is rapidly becoming a favored tool for social engineering attacks, with a significant increase in organizations reporting incidents involving AI-generated impersonations of executives and employees. This trend is eroding traditional trust mechanisms, such as voice and video verification, and forcing security teams to rethink their authentication strategies. Ethical concerns are also at the forefront, as CISOs and boards are urged to monitor for red flags such as loss of human agency, lack of technical robustness, and data privacy risks associated with AI deployments. Regulatory frameworks and responsible AI governance are becoming essential to ensure that AI systems are deployed safely and ethically, particularly in sectors like financial services where the stakes are high. The convergence of these factors is creating a dynamic environment where cybersecurity professionals must continuously adapt to the evolving threat landscape, leveraging AI for defense while remaining vigilant against its misuse. As organizations rush to deploy AI-driven solutions, the need for comprehensive security strategies, ongoing workforce development, and ethical oversight has never been more critical. The future of cybersecurity will be defined by the ability to harness AI's power responsibly while mitigating its inherent risks, ensuring both operational resilience and trust in digital systems.
Jun 29, 2026
Former CISA Director Jen Easterly stated that advances in artificial intelligence could fundamentally change the cybersecurity landscape by enabling rapid identification and remediation of software vulnerabilities, potentially reducing the need for traditional security teams. She emphasized that the core issue is software quality, not just cybersecurity, and argued that if AI is governed and deployed securely, security breaches could become rare anomalies rather than routine business risks. Easterly also highlighted the dual role of AI, noting that while it empowers defenders, it also enhances attackers' capabilities through stealthier malware and more sophisticated phishing. Security leaders and CISOs are increasingly concerned about the rapid adoption of AI and the lack of mature guardrails to secure these technologies. Surveys indicate that a majority of CISOs view generative AI as a significant risk, and many organizations are still developing the expertise needed to secure AI infrastructure. The evolving threat landscape, combined with the proliferation of AI, is driving stress and shifting priorities for security teams, who must now address both the opportunities and challenges presented by AI-driven change.
Jun 29, 2026