Short answer: 67% of security leaders find their teams struggle to keep up with business needs due to AI and identity-based attacks. To cope, focus on training and automation.
TL;DR
- 67% of security leaders face challenges.
- AI and identity attacks are major issues.
- Human roles shift to higher value tasks.
- Skills gaps cost organizations £380,000 annually.
What happened?
This issue is about security teams struggling to meet the demands of their businesses. With the rise of AI and identity-based attacks, teams are finding it hard to keep up. The main challenges are related to AI risks and advanced phishing techniques. As a result, human roles are moving towards more strategic tasks like threat investigation and risk management. Organizations need to invest in training and automation to address these gaps.
- Phishing
- Fake messages or websites that trick people into giving passwords or money.
Key facts
| Reported by | CSO Online |
|---|---|
| Date reported | 03 Nov 2026 |
How it works
Cybersecurity teams struggle to handle new challenges like AI and identity-based attacks. They face difficulties in managing expanding digital operations and skills shortages. AI takes over routine tasks, but leaves more complex issues for humans, like threat investigation.
- Identity and phishing attacks rise
- Teams under pressure
- Skills gaps widen
- Projects abandoned
Skillmate analyst mapping (our judgement, not from the vendor):
- T1566 Phishing
Timeline
| Date | Event | Source |
|---|---|---|
| 2026-11-03 | Reported by CSO Online | CSO Online |
| 2026-11-05 | This Skillmate explainer published | Skillmate |
How to fix it
- Check the sender address and the real link destination before clicking.
- Never share one-time passwords or login codes with anyone.
- Report the message to your IT team or the service's official abuse address.
How to detect it
Security teams are under pressure. They should look for unusual logins, failed login attempts, and unexpected crashes.
Signs to watch for:
- Messages that push urgency, payment changes or login links.
- Sender domains that look like, but are not, the real company.
- Logins to your accounts right after someone clicked a link.
What is confirmed
- Reported by CSO Online
Why it matters
The skills gap leads to higher costs, project failures, and security breaches.
Learn the skills behind this story
Want to understand attacks like this and defend against them? Join Skillmate cybersecurity training or practise hands-on in Skillmate Labs.
FAQ
What skills are most in demand for cybersecurity?
AI and machine learning, cloud security, and securing AI technology are the top skills needed.
How much does a skills gap cost in cybersecurity?
In the UK, cybersecurity professionals estimate skills gaps cost at least £380,000 each year.
Why are security teams struggling?
Security teams are overwhelmed by AI-related risks, identity-based attacks, and expanding digital operations.
What roles are hard to find in cybersecurity?
Cloud security architects, AI security specialists, and forensics analysts are the hardest roles to fill.
Sources
How we wrote this: facts come from the sources above. An on-prem AI model drafted the plain-English parts and every sentence was checked against the sources; unsupported sentences were removed. MITRE mapping is our own judgement.
