AI's Shadow War: The Race to Arm Cybersecurity's Front Lines

NEW YORK, NY – August 12, 2026

Later this month, cybersecurity training giant Infosec Institute will convene a virtual summit not merely to discuss artificial intelligence, but to address a growing sense of urgency rippling through the global security landscape. The AI Cyber Readiness Summit, as it’s called, is less a conference and more of a strategic briefing for an industry on the verge of a paradigm shift. While the event is framed as a training initiative, its existence points to a deeper, more unsettling economic reality: the corporate world is rapidly adopting AI tools without the necessary expertise to defend them, creating a vast and vulnerable new attack surface.

The core of the problem, as articulated by Keatron Evans, Vice President of AI Enablement and Strategy at Infosec's parent company Cengage, is one of fundamental awareness. “AI cyber readiness starts with visibility — where AI is being used, what value it creates, what it costs and what new risks it introduces,” Evans stated. This simple call for visibility belies the complexity facing today's Chief Information Security Officers (CISOs). They are grappling with a technology that is both a powerful defensive asset and a formidable offensive weapon, deployed in a corporate environment where the workforce’s ability to manage it lags dangerously behind.

The Widening AI Skills Chasm

The summit's focus on building “AI-ready teams” is a direct response to one of the most significant bottlenecks in the modern economy: the AI security skills gap. This is not just an extension of the long-standing cybersecurity workforce shortage, which already numbers nearly five million unfilled positions globally. It is a more specific and acute crisis. A staggering 92% of cybersecurity leaders identify AI as the most in-demand skill for 2025, yet recent studies show that nearly 60% of organizations report critical or significant skills gaps within their own security teams.

This chasm between need and capability is creating a high-risk environment. Organizations are investing heavily in AI-powered security solutions—with some reports indicating 97% are using or plan to use them—but a near majority admit they lack the in-house expertise to manage these complex systems effectively. The result is a dangerous disconnect between technological investment and operational readiness. Companies are buying advanced tools without a clear strategy for how their people will integrate, manage, and secure them, leaving them exposed to the very threats they sought to mitigate.

The World Economic Forum’s latest Global Cybersecurity Outlook underscores the stakes, identifying AI-related vulnerabilities as the fastest-growing category of cyber risk. This is the economic driver behind the industry's sudden mobilization: the risk is no longer theoretical, and the cost of inaction is escalating.

From Threat Vector to Defensive Tool

AI’s dual-edged nature is at the heart of the current challenge. On one hand, adversaries are leveraging generative AI to automate and refine their attacks with unprecedented speed and sophistication. Hyper-personalized phishing emails, deepfake audio that convincingly clones an executive’s voice, and adaptive malware that rewrites itself to evade detection are no longer the stuff of science fiction. They are active threats that render many traditional security measures obsolete.

On the other hand, AI is an indispensable tool for defenders. Only machine learning models can process the petabytes of data flowing through a modern enterprise network fast enough to detect the subtle anomalies that signal a breach. AI-driven systems are becoming essential for threat detection, automated incident response, and behavioral analytics. This creates a strategic imperative for security teams: they must master the use of AI as a defensive shield while simultaneously learning to defend against AI-powered attacks.

The upcoming summit’s agenda reflects this duality, with sessions dedicated to “responsible AI governance” and “securing generative AI” sitting alongside discussions on using deep learning for network anomaly detection. The inclusion of speakers like James Stanger from CompTIA, a key body for industry certifications, and Theo Nasser, co-founder of Right-Hand Cybersecurity, highlights the multifaceted nature of the solution. It requires a blend of standardized skills, advanced technology, and a renewed focus on the human element of security.

Forging the AI-Ready Defender

Infosec's summit is a microcosm of a broader industry push to formalize what it means to be an “AI-ready” security professional. The event is designed as a practical toolkit, moving beyond high-level strategy to offer actionable guidance. An interactive workshop led by curriculum manager Iva Amos will guide leaders through the process of identifying where AI is already active—and often unsanctioned—within their organizations, assessing readiness gaps, and defining concrete next steps.

The summit also serves as a gateway to a deeper ecosystem of training and certification that is rapidly being built out. Infosec, for instance, already offers a robust catalog of over 60 AI-related courses and boot camps aligned with emerging industry credentials. These include CompTIA's SecAI+, designed for practitioners securing AI systems, and ISACA's Advanced in AI Security Management (AAISM), aimed at management professionals. This signals a crucial market maturation, moving from ad-hoc learning to structured, verifiable expertise.

The involvement of Theo Nasser is particularly telling. His firm, Right-Hand Cybersecurity, specializes in Human Risk Management, using AI to deliver personalized training that modifies employee behavior. This focus acknowledges a critical truth: even the most advanced technical defenses can be undermined by human error, and AI can be used to make that human element more resilient. The future of cyber defense isn't just about better algorithms; it's about better-equipped people.

A Market-Wide Mobilization

Ultimately, the Infosec summit is a signal that the training and certification sector is moving to meet a powerful market demand. The event's rapid approach to 1,000 registrants indicates that security leaders are acutely aware of their predicament and are actively seeking solutions. They understand that the race to secure AI is not one they can win simply by purchasing more software.

The challenge lies in transforming the existing workforce. With a global shortage of talent, organizations cannot hire their way out of this problem. The only viable path forward is to upskill their current teams, equipping them with the knowledge to assess AI system vulnerabilities, implement robust governance frameworks, and distinguish between genuine AI-powered security solutions and market hype.

As enterprises continue their relentless push into digital transformation, the line between business risk and technology risk has been erased. The race between AI-driven offense and AI-empowered defense is now underway, and its outcome will be determined not by the sophistication of the technology alone, but by the readiness of the people on the front lines.