Companies are investing heavily in AI but struggle to enhance workforce skills due to outdated training methods. New technologies like extended reality could improve skill retention and application, yet many investments fall short of expectations.
https://hbr.org/2025/12/the-new-tools-that-can-improve-workforce-training
Microsoft emphasizes adapting cybersecurity talent strategies in response to AI advancements, highlighting the need for critical thinkers alongside technical skills. Future cybersecurity teams should consist of diverse backgrounds to understand AI vulnerabilities better and promote innovative problem-solving. The recruitment process must focus on adaptability, interdisciplinary collaboration, and a proactive learning culture. Effective onboarding and retention of talent are critical, emphasizing continuous training to keep pace with evolving threats. Microsoft advocates for a shift in hiring practices to build resilient cybersecurity defenses against AI-powered adversaries.
Bendigo Bank partners with Google Cloud for AI and cybersecurity enhancement, improving staff skills and operational efficiency. The collaboration includes deploying AI tools like Gemini Enterprise to enhance productivity, streamline processes, and bolster security via Google’s systems. The aim is to create a digitally skilled workforce and improve customer services for 2.9 million customers while ensuring robust security measures.
CISO Series discusses human error in security, questioning why systems aren't designed with this in mind. The show is hosted by David Spark and Andy Ellis, featuring CISO Richard Rushing. They emphasize that good CISOs prioritize strategy over merely managing security tools, with the importance of mindset in leadership. The conversation explores the distinction between security hygiene versus vulnerabilities in cybersecurity, emphasizing that understanding risks and context is crucial for effective security practices. The episode also introduces ThreatLocker as a sponsor, in light of addressing configuration risks.
AI-driven cyber threats are increasing, necessitating urgent demand for skilled cybersecurity professionals. Organizations must enhance training that combines technical skills with soft skills to prepare future defenders. The cybersecurity workforce faces a significant talent shortage, estimated at 2.8 to 4.8 million professionals globally. Effective use of AI in cybersecurity can mitigate risks, but organizations often struggle to find talent with the required expertise. Closing the skills gap demands long-term strategies focused on education, targeted training, and collaboration across sectors.
CIOs focus on AI adoption balancing expansion and employee training. Many lack AI governance policies, with training access lagging. Executives emphasize clear use cases, tailored training, and risk management. Jabil's AI Council guides deployment; Deloitte integrates AI training in leadership programs, and Detroit's CIO prioritizes accuracy vigilance. Effective AI tools enhance productivity, shifting mundane tasks to automation.
https://www.hrdive.com/news/CIO-AI-adoption-jabil-deloitte-city-detroit/804735/
UC San Diego study finds cybersecurity training ineffective; trained employees still click on phishing attacks. Research suggests enhancing system defenses rather than relying on training.
CISO Series discusses measuring defenses against social engineering attacks, particularly phishing. Hosts David Spark and Mike Johnson question the effectiveness of using phishing click rates as a metric, suggesting they are easily influenced and insufficient. Experts emphasize the need for a holistic approach, focusing on response actions post-click and measuring susceptibility across various channels, not just email. They highlight the importance of a layered security strategy and the evolving sophistication of attacks facilitated by advances like AI. Recommendations include enhancing awareness training and developing contextual metrics to better assess organizational security.
https://cisoseries.com/how-do-we-measure-our-defenses-against-social-engineering-attacks/
BT Security’s Tris Morgan emphasizes the importance of human firewalls in AI cybersecurity, arguing that employee training is crucial against sophisticated AI-driven attacks. He believes that investing in a cyber-aware culture transforms employees into an active defense against threats. Despite advanced technology, many breaches result from human error, with attackers exploiting trust and behavior. Effective training should be ongoing, engaging, and relevant, using simulations and real-world scenarios to foster awareness. For SMEs, cost-effective strategies include realistic training and clear security policies to cultivate vigilance. Continual adaptation to evolving threats is essential for strong cybersecurity defenses.
https://aimagazine.com/news/bt-security-the-importance-of-humans-in-ai-powered-attacks
CSOonline introduces a hybrid search to enhance content exploration. Key features include security spotlights, newsletters, resources, and buyer's guides, along with extensive topics on cybersecurity and IT management. An article emphasizes that 57% of cyber incidents are unexpected, prompting CISOs to rethink tabletop exercises to focus on realistic, smaller attacks rather than rehearsing for known threats.
