Despite of increasing AI-driven cyber threats, 44% of cyber experts reported that their organisations lack adequate policies or understanding of the risks AI poses, and 85% are still considering adopting it.

AI and machine learning are expected to be one of the most influential technologies in cybersecurity by 2025, with 51% of respondents identifying them as critical, far outpacing technologies like zero trust, which only 7% cited.

CIISec CEO Amanda Finch notes: “Whilst the AI revolution will undoubtedly benefit many business functions, it’s presenting more questions than answers for cyber security professionals. There’s a huge risk of both cyber criminals weaponising the technology and employees with a lack of risk awareness inadvertently leaving their organisation vulnerable when using it.”

Andy Ward, SVP of Absolute Security commented: "As AI-fuelled attacks grow more complex, taking proactive steps to protect sensitive data and address cyber related risks is crucial. In fact, our research suggests that over half of CISOs feel their security team are unprepared for evolving AI-powered threats."

"While AI opens up good opportunities for workforce development, prioritising cyber resilience must be a top priority, not an afterthought. A breach that exposes customer or employee data can cause lasting harm, which is why organisations need to focus on threat detection, prevention, and readiness to defend against attacks. Organisations can gain a competitive edge through AI, but they must also implement a robust cyber resilience structure to safeguard vulnerabilities. We must harness AI as a force for resilience, not just a tool for attackers.”

Beyond AI, the report reveals broader challenges in the industry, with budgets not keeping pace with the complexity of threats. Though average cybersecurity salaries have grown, over half of professional’s report difficulty sleeping due to job stress, and 80% feel that budgets are flat or inadequate. Many fear this could lead to a lack of progress period, limiting the industry’s capacity to respond to evolving threats effectively.

The report also highlights diversity and recruitment concerns, with only 19% of entry-level hires coming from non-degree backgrounds and just 10% of the workforce being women. Skills shortages, especially in analytical and problem-solving, pose an additional barrier. Finch advocates for broadening recruitment to prioritise skills over formal qualifications, stressing that bridging this gap is crucial as the industry faces increasingly sophisticated AI-driven threats. Retaining talent through better support and career progression will also be essential for building a resilient cybersecurity workforce for the future.

For more startup news, check out the other articles on the website, and subscribe to the magazine for free. Listen to The Cereal Entrepreneur podcast for more interviews with entrepreneurs and big-hitters in the startup ecosystem.