Over three quarters (78%) of cheif information security officers (CISOs) surveyed by Darktrace say that AI-powered threats are having a significant impact on their organisations, a 5% increase from 2024.

While an increasing number of CISOs report feeling a significant impact from AI threats, more than 60% now say that they are adequately prepared to defend against these threats, an increase of nearly 15% year-over-year.

However, insufficient AI knowledge and skills and a shortage of personnel and talent continue to be listed as the two top inhibitors to a successful defence.

“The impact of AI on cybersecurity is clear and increasing. There are more employees and enterprise applications using AI that must be protected. Adversaries are using it to make their attacks more targeted, scalable, and successful. All of this is unfolding in a highly volatile geopolitical environment that is creating more uncertainty,” said Jill Popelka, CEO, Darktrace.

“There has never been a more urgent need for AI in the SOC to augment teams and pre-empt threats so organizations can build their cyber resilience. That’s why Darktrace continues to invest in new innovations to help customers manage risk and thrive in this new era of AI threats.”

The second annual report surveyed over 1,500 cybersecurity professionals holding roles ranging from CISO to IT security managers, IT security analysts and incident responders across 14 different countries.

The report also found that there is a gap between confidence in AI and comprehension of how it can be best deployed.

95% of all cybersecurity professionals surveyed believe AI can imporve the speed and efficiency of their ability to prevent, detect, respond and recover from threats, but significant knowledge gaps persist.

Only 42% reported that they fully understand the types of AI in their current security stack. The gap increases across different roles, with 60% of CISOs reporting they know exactly what AI types are used versus 10% of IT security analysts/operat0rs and 14% of IT security administrators.

Moreover, two of the top three inhibitors reported to defending against AI-powered threats include insufficient knowledge or use of AI-driven countermeasures and insufficient knowledge/skills pertaining to AI technology.

Despite respondents citing insufficient personnel to manage tools and alerts as the greatest inhibitor to defending against AI-powered threats, only 11% reported that they plan to increase cybersecurity staff in 2025, down from last year.

AI is seen by this group as essential to augment human team members, with 64% reporting that they plan to add AI-powered solutions to their security stack in the next year and 88% reporting that the use of AI is critical to free up time for security teams to become more proactive.

Further, while managing risk is a priority, more action is needed. 95% of all respondents report that their organisation is either currently discussing (50%) or has already implemented (45%) a formal policy for safe and secure use of AI.

This, however, varies by region and industry. 52% of organisations in North American and 43% of organisations in EMEA report having a formal policy in place.

Organisations in the financial services, retail and technology sectors globally report the highest level of policities currently in place. At the same time, only 45% of respondents report that they have a formal AI oversight and governance function and only 37% report that they regularly monitor or audit AI usage and outputs.

Recommended reading

• Cybersecurity in 2024 | The High Cost of Innovation
• AI in Cybersecurity | Navigating the Promises and Risks
• IT and Security Leaders Admit Hardware Cybersecurity Gap

When asked about their cybersecurity technology preferences, respondents highlighted the importance of data privacy and a platform approach. Notably, 84% reported that they prefer solutions that don’t require external data sharing and 87% indicated they prefer a platform approach over implementing a collection of point solutions.

When asked to look ahead at the future impact of AI in cyber defence, cloud security (66%) and network security (55%) are identified as two domains where cybersecurity professionals expect defensive AI to have the biggest impact. impact expected to see the greatest AI impact.

“The integrity and reliability of IT systems are under increasing pressure as adversaries harness Generative AI to amplify their attacks. The rapid evolution of AI-powered threats is forcing security teams to rethink their defensive strategies, as traditional cybersecurity measures can no longer match the speed, scale, and sophistication of modern attacks,” said Jon Mendoza, CISO of Technologent, a global provider of IT solutions and services for Fortune 1000 companies.

“To stay ahead, organizations must integrate AI-driven security solutions that not only detect and respond to threats but proactively anticipate them. True resilience comes not just from deploying AI but from empowering security teams with the knowledge and tools to wield it effectively.

“A security platform built on actionable-intelligence and hyper-automation is essential to containing threats and minimizing the blast radius of attacks. In today’s ever-evolving threat landscape, AI isn’t just an advantage—it’s a fundamental necessity.”