CyberEdge Group today announced the release of its 13th annual Cyberthreat Defense Report (CDR), a comprehensive global study capturing the perspectives of 1,200 IT security professionals across 17 countries and 19 industries. The 2026 report reveals a cybersecurity landscape increasingly shaped by artificial intelligence (AI), workforce transformation, and escalating threat sophistication. This year's report highlights a pivotal shift: AI is now both a critical defense tool and a powerful weapon in the hands of cyber adversaries.
80% of IT security professionals believe AI will significantly reduce staffing needs for their roles.
46% expect workforce disruption within the next two years.
97% of IT security hiring managers actively seek candidates with AI-related skills.
46% report AI is contributing to a rise in adaptive and evasive malware.
Proprietary LLMs viewed as most difficult IT component to secure.
64% of organizations experienced a ransomware attack; ransom payment rate rose from 41% to 55%.
This year's findings underscore the profound and accelerating impact of AI on cybersecurity operations and talent. 80% of IT security professionals believe AI will significantly reduce the number of people required to perform their current roles. Among them, 46% expect this shift to occur within the next two years, signaling possible rapid workforce disruption. At the same time, 97% of IT security hiring managers are actively seeking candidates with at least one AI-related skill, highlighting a critical shift in workforce requirements.
46% of respondents report that AI is contributing to a rise in adaptive and evasive malware, reflecting attackers' growing use of AI-powered techniques. From a list of 14 IT components, proprietary large language models (LLMs) are viewed as the most difficult to secure, emphasizing new and complex risk vectors introduced by AI adoption. While AI dominates this year's narrative, the report also highlights ongoing operational and strategic challenges. "Lack of skilled personnel" remains the top inhibitor to cybersecurity success, reinforcing the urgency of talent development—particularly in AI-related domains.
64% of organizations experienced a ransomware attack in the past year. Of those that were victimized, the percentage paying a ransom increased substantially, from 41% to 55%. Of those victimized organizations that paid ransoms, 61% successfully recovered their data – up from 54% last year. On a positive note, 90% of organizations increased their IT security budgets in 2026—a record high for the report—with an average increase of 5.6%, reflecting heightened prioritization of cybersecurity investments. Additionally, more than half of organizations (53%) now have a board member involved in or leading a cyber risk assessment committee.
As Steve Piper, founder and CEO of CyberEdge Group, stated: "AI is no longer an emerging technology in cybersecurity—it is a defining force. Organizations are simultaneously leveraging AI for defense while contending with adversaries who are weaponizing it, creating a rapidly evolving and highly dynamic threat environment."
Organizations that invest in AI capabilities, talent development, and resilient security strategies now will be best positioned to navigate this rapidly evolving landscape.
About the Report
The 2026 Cyberthreat Defense Report is based on a comprehensive 27-question survey conducted in November and December 2025. The study captures insights from IT security professionals working in mid-size to large organizations (500+ employees) across six global regions. It provides a detailed benchmark of cybersecurity postures, investment priorities, and technology adoption trends.
About CyberEdge Group
CyberEdge Group is a leading research and marketing firm dedicated to serving cybersecurity vendors worldwide. Headquartered in Fort Lauderdale, Florida, the company partners with nearly one in four established IT security solution providers to deliver data-driven insights and strategic marketing services. Its flagship Cyberthreat Defense Report is widely recognized as an authoritative industry resource.