87% of Companies Were Hit by an AI Cyber Attack. The Fix Is a Skills Problem, Not a Headcount One

2026-07-10 · Source: HackerNoon · Field: Technology & Digital — Cybersecurity & Data Privacy, Artificial Intelligence & Machine Learning · Depth: Intermediate, medium

Summary

AI-driven cyberattacks are rapidly escalating, with cybercrime projected to cost \$10.5 trillion in 2025. A recent SoSafe survey revealed 87% of organizations experienced an AI-driven attack in the past year, yet only 25% of teams are confident in detecting them. This surge is fueled by automated phishing, 2000% increase in deepfake incidents since 2022, and polymorphic malware. While the market for AI-in-cybersecurity tools is forecast to triple from \$25-30 billion in 2024-25 to \$94-134 billion by 2030, the primary bottleneck has shifted from a cybersecurity headcount shortage (previously 4.7 million) to a critical skills gap. ISC2's 2025 study found 95% of teams report a skills gap, with 59% deeming it critical, and 41% identifying AI as the most needed technical skill. This has led to AI security emerging as a distinct discipline, exemplified by CompTIA's new SecAI+ certification, which focuses 40% on securing AI systems.

Key takeaway

For Directors of AI/ML or AI Security Engineers facing escalating AI-driven cyber threats, your focus must shift from hiring more generalists to upskilling existing teams in AI security. Prioritize targeted training and certifications like CompTIA SecAI+ to build dual competency in defending AI systems and leveraging AI for security operations. This approach addresses the critical skills gap, mitigates insider risk from shadow AI, and positions your organization to effectively counter machine-speed attacks.

Key insights

AI-driven cyberattacks demand a shift from headcount to specialized AI security skills and dedicated training.

Principles

• AI security is now a distinct discipline.
• Education lags behind AI technology advancements.
• Upskilling existing staff is key to closing skill gaps.

In practice

• Implement controls for internal AI tool usage.
• Fortify ML models against adversarial attacks.
• Use AI for threat detection and log analysis.

Topics

• AI Cyberattacks
• Cybersecurity Skills Gap
• AI Security Certifications
• CompTIA SecAI+
• Adversarial Machine Learning
• Insider Risk

Best for: CTO, Executive, Investor, AI Security Engineer, Director of AI/ML, Consultant

Related on AIssential

• Cybersecurity and the Gap Between Skill and Ability — AI significantly widens the gap between cyber skill and ability, enabling autonomous attacks and increasing global volatility.
• Enterprises report increasing budgets for security training in AI and other critical topics — Enterprises are prioritizing cybersecurity training, especially for AI skills, despite significant time constraints.
• Assume AI cybersecurity attacks are the future: 43% of companies have already experienced it — AI-enhanced cyberattacks are widespread, with 43% of organizations affected, demanding proactive AI-driven defense strategies.
• AI Security Paradox: Are Firms Overconfident On AI Threats? — Enterprise AI adoption outpaces security, creating a paradox of employee overconfidence and significant vulnerability to AI-driven social engineering.
• Why Every Full Stack and AI Student Should Care About Modern AI Cyber Threats — AI's dual nature enhances both development and cyberattack capabilities, making security a universal developer responsibility.
• While Everyone Watches Glasswing, Attackers Are Walking Through Your Front Door. — Most major cyberattacks exploit common, known vulnerabilities, not zero-days, with AI accelerating their scale.

See Counsel's argued verdicts on the open AI decisions leaders are weighing →

Open in AIssential →

Editorial summary, takeaway, and curation by AIssential. Original article published by HackerNoon.