Page 117 - Cyber Defense eMagazine September 2025

GenAI Use by Cybersecurity Teams

Cybersecurity teams using
GenAI tools

Cybersecurity teams not
using GenAI tools

Source: 2024 ISC2 Cybersecurity Workforce Study

Despite its advantages, AI also introduces its own set of challenges. Gen AI is a double-edged sword.
As per the 2024 ISC2 Cybersecurity Workforce Study, 45% of cybersecurity teams implemented Gen AI
into their teams’ tools to bridge skills gaps, improve threat detection and provide vast benefits to
cybersecurity. Over half have already faced data privacy and security concerns due to organizational
adoption of Gen AI. As the adoption of Gen AI in cybersecurity continues to grow, cybersecurity
professionals recognize the need for a formal strategy and regulations to govern its safe and responsible
use.

Although 90% of respondents have some policies related to Gen AI, 65% say their organization needs to
implement more regulations on the safe use of Gen AI. Another significant issue is adversarial attacks,
where attackers manipulate inputs in subtle ways to mislead the system. For instance, adding seemingly
benign data to a file or tweaking user behavior can confuse AI into classifying threats as safe. In fact,
according to the MIT AI Risk Registry, there are potentially over 700 risks that need to be mitigated with
the use of Ge AI. NIST has worked in collaboration with the private and public sectors to develop a
framework to manage risks to individuals, organizations and society associated with AI and is
recommending a formal AI Risk Management Framework as a standard.

Cyber Defense eMagazine – September 2025 Edition 117
Copyright © 2025, Cyber Defense Magazine. All rights reserved worldwide.