A November 9 Cybersecurity Dive report examined how businesses are pushing cyber focus AI with employee training and universities teaching AI security, while organizations struggle to prepare employees for threats that conventional security lessons cannot fully address.
AI is complicating cybersecurity education as attackers exploit familiar weaknesses with increasingly convincing techniques. The problem is not that cybersecurity basics have stopped working, but that attackers have found better ways around them.
Is Cybersecurity Training Enough for a Smarter Attacker?
Most employees know how to avoid suspicious links, check unfamiliar emails, and never share passwords. Yet convincing phishing messages and fraudulent AI applications are making those habits harder to maintain, exposing the limits of traditional awareness programs.
During a discussion with Dark Reading and TechTarget Cybersecurity, journalists examined why companies need training that reflects actual workplace risks rather than another mandatory presentation.
TechTarget editor, Sharon Shea, pointed to the SANS 2026 Security Awareness and Culture Report, which found that around one in five organizations design awareness programs primarily to meet compliance or audit requirements, an approach that can leave employees completing exercises without understanding how attacks relate to their jobs.
“You really want to identify the behaviors within your organization that create risk,” said Shea.
That distinction matters because changing cyber behavior looks different across departments. Someone processing payments may face an impersonated executive requesting money, while an IT employee could receive a convincing request to reset account credentials.
The growing interest in next generation cyber security training comes from those differences, with some organizations turning to AI-generated phishing simulations tailored to individual employees.
Rather than repeating identical lessons, such exercises could help strengthen cybersecurity by showing workers how attackers use familiar workplace situations against them. For companies adopting cyber focus AI, the difficult part is deciding what employees need to learn, especially when the same technology used to improve training can also make attacks more effective.
Dark Reading’s Rob Wright described another problem involving malicious advertisements and manipulated search results promoting fake AI tools. Employees searching for new software may encounter convincing download pages that install information-stealing malware, meaning a seemingly harmless download can become the starting point for a sophisticated cyberattack.
The risks are expanding with autonomous applications, as agentic AI cyber threats introduce questions about what permissions employees give software and how much control those applications should have.
Although defensive AI can support suspicious activity detection, workers still need to understand where automated protection ends and their own responsibility begins, which makes changing cyber behavior more about recognizing how decisions create opportunities for attackers.
Universities Are Teaching AI Security, but Employers Need Skills Now
Cybersecurity Dive also reported how those difficulties are reaching universities, highlighting Carnegie Mellon University’s AI security certificate and Georgia Tech’s course on machine learning security, both reflecting how cyber focus AI is becoming part of specialized education.
Such programs could support next generation cyber security by helping students understand vulnerabilities within AI systems alongside traditional cybersecurity principles.
Universities are also sharing cyber focus AI teaching approaches through federally supported academic partnerships. Yet the workplace is already showing why additional education matters.
In April, an analysis by International Information System Security Certification Consortium (ISC2) found that 95% of respondents reported at least one cybersecurity skills need, while 59% described their deficiencies as significant or critical.
According to ISC2 2025, they can’t find people to hire with the skills they need.
Organizations may therefore employ cybersecurity professionals but lack the expertise needed when new technologies are introduced, making cyber focus AI as relevant to existing workers as it is to graduates. ISC2 found that respondents ranked the need for critical skills above the need for additional headcount, while 29% said they couldn’t afford to hire candidates with the skills required.
ISC2 also found that 21% of respondents reported IT departments frequently introducing technology without adequate security expertise, illustrating the challenges of implementing AI in cloud security when technical knowledge falls behind adoption.
Employers increasingly need people who can combine critical intelligence with technical skills. Learning to use defensive AI is one part of that preparation, while understanding AI automated exploit generation helps professionals anticipate how attackers might identify vulnerabilities quickly.
Those capabilities matter most where failure is least tolerable, which is why critical infrastructure AI cyber threats are shaping what employers now expect from new hires.
Practical instruction would also need to connect automated monitoring with real investigations, since machine learning threat detection endpoints advanced cyber attacks can flag suspicious behavior without explaining what actually happened.
ISC2 argues that organizations should develop existing employees instead of searching for candidates who already possess every emerging skill, an approach that could strengthen cybersecurity without making recruitment the only solution.
As universities develop specialized courses and businesses rethink workplace education, cyber focus AI is becoming a question of whether security knowledge can advance quickly enough to match the technology both attackers and defenders are adopting.
Inside Telecom provides you with an extensive list of content covering all aspects of the tech industry. Keep an eye on our Cybersecurity sections to stay informed and up-to-date with our daily articles.
