#Fortinet Report: Global surge in cyberattacks highlights talent shortage and rising costs

Global surge in cyberattacks is forcing organizations to strengthen defenses while addressing critical talent shortages, according to Fortinet.

Cyberattacks have become a widespread and persistent threat across all sectors, as cybercrime increasingly operates at an industrial scale driven by speed, automation, and volume, according to Fortinet.

Sami AlShwairakh, Senior Regional Director Sales at Fortinet, stated to  Riyadh Daily that cybercriminals are now able to exploit targets faster and more efficiently, leaving no organization immune. He noted that by 2026, threat actors are expected to focus less on innovation and more on throughput, defined as the ability to move from reconnaissance to monetization in the shortest possible time.

“In practical terms, this means a ransomware affiliate can launch multiple attacks in the time it once took to coordinate a single campaign, or an AI-powered model can analyze terabytes of stolen data in minutes to identify which targets to extort first,” AlShwairakh said. This shift, he added, is reshaping the economics of cybercrime and forcing defenders to compress detection and containment cycles across every digital environment.

Fortinet’s latest research indicates that the shortage of cybersecurity skills and training remains a major factor behind rising breach rates. According to the findings, lack of cybersecurity awareness and practical expertise continues to be cited by IT leaders as one of the top causes of successful attacks. Following a breach, many IT and security leaders respond by expanding their IT and security teams or mandating certifications in data, cloud, and network security.

Artificial intelligence plays a growing but complex role in this landscape. While AI has become essential for automating threat detection and response, AlShwairakh stressed that relying on technology alone is insufficient. Turning to AI, he said, is no longer optional, especially as cybercriminals themselves use AI to launch attacks at unprecedented speed and scale.

He explained that AI can function as a “junior analyst,” rapidly sorting through security logs to pinpoint the root causes of threats and highlight key insights. This enables experienced defenders to focus on higher-value tasks such as critical analysis, decision-making, and overseeing response efforts. Without skilled professionals, however, AI-driven defenses remain limited in their effectiveness.

Sami AlShwairakh, Senior Regional Director Sales at Fortinet,

The cybersecurity skills gap is also closely linked to escalating financial losses. More than half of organizations globally struggle to recruit qualified cybersecurity professionals, with 54% citing the lack of skilled staff as one of the leading contributors to breaches. At the same time, 52% of organizations reported breach-related losses exceeding $1 million over the past year, pointing to a strong connection between talent shortages and financial impact.

In Saudi Arabia, rapid digital transformation across government and industry has expanded both opportunity and exposure. As digital initiatives accelerate, the attack surface continues to grow, while AI enables malicious actors to increase the speed, frequency, and scale of attacks. Critical digital and operational infrastructures are among the most attractive targets, underscoring the need for advanced, machine-speed defense capabilities.

As a strategic cybersecurity partner in the Kingdom, Fortinet continues to support security leaders and organizations in protecting their critical assets through integrated security approaches built on continuous intelligence, validation, and containment.

Addressing the skills gap remains a central priority. Through the Fortinet Training Institute, one of the largest cybersecurity training programs globally, Fortinet is working to make cybersecurity education and career opportunities more accessible. The company has committed to training one million people worldwide and collaborates in Saudi Arabia with the Ministry of Education and the National Cybersecurity Authority to embed cybersecurity awareness across multiple levels, from the workforce to wider society.

Looking ahead, AlShwairakh said the core message of Fortinet’s Skills Gap report is the need for clarity around what AI tools can and cannot do, alongside sustained investment in people. Adjusting hiring expectations, focusing on candidate potential rather than credentials alone, and committing to continuous skills development are key pillars of a balanced cybersecurity strategy that combines awareness, training, and technology.