How AI widens the cybersecurity skills gap: Barracuda 2026 report

Security teams are being asked to defend expanding digital estates against AI-driven attacks, identity abuse, and advanced phishing, while head count and budgets stall. The new Barracuda Cybersecurity Skills Gap Report quantifies this pressure based on 2,000 IT and security decision-makers worldwide. Softprom is the official distributor of Barracuda Networks.

What was announced

On October 21, 2026, Barracuda Networks published its Cybersecurity Skills Gap Report based on a survey of 2,000 mid- to senior-level IT and security decision-makers in organizations of 100 to 2,000 employees across the US, UK, France, DACH, Benelux, the Nordics, Australia, India, and Japan.

• 94% of organizations report cybersecurity skills gaps.
• 68% cite gaps linked to AI-related risks.
• 67% cite gaps in advanced identity and phishing threats, including BEC, OAuth abuse, and MFA bypass.
• 56% report security head count reductions linked to AI, split evenly between entry-level and senior roles.
• 67% say teams struggle to scale with evolving business needs; 32% can only protect reactively.

The findings show how the impact of AI is changing the cybersecurity landscape faster than many security teams can build the necessary skills, visibility, and governance

Why this matters

For CIOs, CISOs, IT directors, and procurement leaders, the data reframes workforce planning. 79% of organizations say AI already affects security roles or head count, yet 69% still use a shared decision-making model where humans own context and final calls. Automating entry-level work without new development pathways risks hollowing out the talent pipeline that produces tomorrow's incident leaders.

61% of respondents report skill needs in strategic security leadership, including AI governance and translating technical risk into business impact. 56% need more depth in incident response, decision making under pressure, and risk management.

Technical details

• Scope: 2,000 IT and security decision-makers, companies of 100-2,000 employees.
• Regions: US, UK, France, DACH, Benelux, Nordics, Australia, India, Japan.
• Timeframe: security skills and capability challenges over the previous 12 months.
• Top gap areas: AI risks (68%), identity and phishing (67%), strategic leadership (61%), incident response (56%).
• Operating model: 69% use shared human-AI decision making in incident response.
• Pressure signals: 50% support growing digital operations without extra resources; 40% say business expectations exceed skills and tooling.

FAQ

What is the biggest skills gap in security teams today?

AI-related risks top the list at 68%, closely followed by advanced identity and phishing threats at 67%, including BEC, OAuth abuse, and MFA bypass.

Is AI replacing cybersecurity professionals?

Not fully. 56% report AI-linked head count reductions, but 69% retain shared human-AI decision making. Human roles are shifting toward investigation, incident leadership, and governance.

How does Barracuda recommend closing the gap?

Barracuda advises combining AI and automation with human expertise, building new development pathways for junior staff, and investing in AI literacy, identity security, and governance skills.

Softprom and Barracuda Networks

Softprom is the official distributor of Barracuda Networks. Explore the vendor portfolio and request a consultation via Barracuda Networks.

Prepared by the Softprom editorial team based on vendor materials (Softprom DistriFlow). Source: original article.