Hack The Box, the global leader in AI cybersecurity readiness, today released its Cybersecurity Workforce Intelligence Report, revealing how AI is influencing cybersecurity skills, career paths and team structures. Based on anonymized data from more than 702,000 cybersecurity professionals across 251 countries and territories, the report highlights a growing shift in training interest toward advanced, AI-related skills and more integrated team models.
Report based on data from 702,000+ cybersecurity professionals across 251 countries and territories.
Prompt Injection accounts for 29% of challenges solved, Machine Learning Model Exploitation 24%, Agentic AI Hijacking 12%.
AI penetration testing emerging as top global training priority.
AI-focused training completion rates reached 64%.
India emerging as key talent hub alongside US, UK, France, and Brazil (accounting for nearly 36% of global upskilling).
Growing overlap between offensive and defensive training points to more integrated purple-team approach.
“AI is creating a divide between teams that can operationalize it and those that can't, and that divide directly translates into risk,” said Haris Pylarinos, Founder and CEO of Hack The Box. “For CISOs, the challenge is ensuring their teams can operate effectively with AI, and without it when needed.”
Cybersecurity practitioners are increasingly prioritizing emerging risks such as prompt injection, model exploitation and agentic AI attacks, signaling a shift in how organizations are preparing their teams. Hack The Box's training data reflects this trend, with Prompt Injection accounting for 29% of challenges solved, Machine Learning Model Exploitation (24%) and Agentic AI Hijacking (12%) representing the top three dominant areas of focus and most solved challenges within the analyzed period.
At the same time, traditional role boundaries are becoming less rigid. Growing overlap between offensive and defensive training points to a more integrated model of cybersecurity capability development, where practitioners build complementary skills across domains rather than operating in silos. This shift supports a more collaborative, purple-team approach that prioritizes adaptability across the full attack-defense lifecycle.
Structured hands-on training programs are accelerating this transition, with AI-focused training completion rates reaching 64%, reinforcing the role of organization-led learning in building advanced cybersecurity capabilities. Meanwhile, the cybersecurity workforce is becoming more globally distributed, with India emerging as a key talent hub alongside the United States, the United Kingdom, France and Brazil, which together account for nearly 36% of global cybersecurity upskilling captured in the report.
To remain effective in an AI-driven landscape, the report suggests security leaders must:
Prioritize AI security skills to address emerging attack vectors and secure AI-enabled systems
Invest in integrated training models that combine offensive and defensive capabilities
Expand global talent pipelines to access emerging skill hubs and address workforce shortages
Commit to continuous, hands-on upskilling to maintain operational readiness
Structured, hands-on training programs are proving critical to this effort, with enterprise-led initiatives driving higher engagement and faster adoption of emerging skills compared to self-directed learning.
Hack The Box is the leading cyber readiness platform for the agentic era, battle-testing and upskilling both humans and AI agents for organizational cyber resilience. Trusted by the Fortune 500, government agencies, and MSSPs, the platform delivers threat-informed learning paths consisting of real-world scenarios in gamified labs and live-fire simulations that build and validate offensive and defensive cyber capabilities. With a loyal community of more than 4 million members and 800+ enterprise customers, Hack The Box empowers teams and intelligent systems alike to strengthen cyber defenses and reduce breach risk effectively.