The cybersecurity landscape is rapidly evolving, with businesses quickly adopting AI tools and expanding their cloud initiatives. However, security teams are struggling to keep up with these changes, particularly in the areas of AI and cloud security. A recent survey found that nearly 39% of respondents reported a lack of skills in these areas, which are difficult to find.
Cloud security requires applying concepts like access control and least privilege to servers and services that may only be controlled through APIs provided by cloud vendors. Any error in a service can compromise the entire infrastructure, making infrastructure as code crucial. Cybersecurity teams need to prioritize skills such as securing virtual instances and developing tools that can reach across multiple servers, services, and cloud providers.
AI, on the other hand, represents a new category of threats, with 34% of survey respondents pointing to a lack of AI-related skills, especially in understanding attack avenues like prompt injection. Researchers are only beginning to understand the threats in this space, and even less is known about potential solutions. The security community is catching up with the use and misuse of AI, and a surge in AI-specific research, training, and certification is expected in the coming years.
Mary Treseler, chief content officer of O’Reilly Media, noted that those hiring in the cyber industry favor candidates with a traditional computer science education and experience in IT roles. Activities such as bug bounty hunting or capture-the-flag participation can supplement traditional education.
Cybersecurity skills gap deepens crisis
Organizations like MITRE are providing tools to share data on real-world AI incidents to combat rising threats. The MITRE ATLAS serves as a safe space to openly share details of cyberattacks across industries and the government. In Europe, the EU Artificial Intelligence Pact promotes AI literacy and awareness for staff dealing with AI system deployment.
Upskilling is currently the most viable solution to address gaps in cybersecurity talent. Laura Baldwin, president of O’Reilly, emphasized that continuous, high-quality training is essential for safeguarding our digital future. Organizations must prioritize ongoing upskilling to stay ahead of evolving risks and build robust defenses.
Certifications, books, videos, and conferences can be valuable resources for staying up-to-date with the latest skills. Popular certifications include CISSP, CompTIA Security+, CEH, and CISM, which provide valuable skills and are attractive to potential employers. As the author of the report, Mike Loukides, stated, “Security is a challenge that will never go away.
Chances are, we’ll invent new risks as quickly as we retire old ones. But we can do better at meeting the challenge.”
