A recent spate of studies and reports has highlighted a pressing concern for cybersecurity teams across various industries: the mental health toll of modern cybersecurity work.

What's Happening

Cybersecurity professionals are facing unprecedented stress levels, with 84% of IT and security professionals feeling uncomfortably stressed at work, according to a study by Object First. This is not just an HR issue; it has significant implications for the security posture of organizations.

The research points to a "perfect storm" of stressors that are uniquely intense in the cybersecurity industry. These include the AI-powered threat escalation, where attackers are moving faster than ever and creating a state of perpetual hyper-vigilance. Additionally, the "blame culture" within some organizations can lead to feelings of anxiety and burnout among professionals.

Furthermore, understaffed teams are forced to do more with less, leading to high levels of fatigue and decreased job satisfaction. This is not just a matter of individual well-being; it has direct implications for the security of an organization's data and systems.

Background and Context

The cybersecurity industry is facing unprecedented challenges in terms of threat sophistication and volume. The use of AI-powered attacks at scale is becoming increasingly common, with 41% of cybersecurity leaders citing this as a top challenge, according to a survey conducted by Filigran during Infosecurity Europe 2026.

Additionally, the survey found that chasing false positives and low-priority alerts was the most time-consuming task for security teams, wasting up to 26% of their time. This is not just a matter of inefficiency; it has significant implications for the ability of organizations to respond effectively to emerging threats.

Why It Matters

The mental health toll of modern cybersecurity work has significant implications for the security posture of organizations. When professionals are stressed and burnt out, they are more likely to make mistakes and miss subtle indicators of compromise. This can lead to a range of negative consequences, including data breaches and system downtime.

Furthermore, the use of AI-powered attacks at scale is becoming increasingly common, with 41% of cybersecurity leaders citing this as a top challenge. This requires organizations to have effective threat intelligence capabilities in place, but even then, many firms find it challenging to translate data into clear actionable priorities.

What Comes Next

Organizations cannot wait for the threat landscape to become "easier." They must change how they operate within it. This requires a range of interventions, including normalizing "no" as an acceptable answer, providing adequate resources and support for professionals, and implementing effective threat intelligence capabilities.

Key Facts

  • 84% of IT and security professionals feel uncomfortably stressed at work, according to Object First study.
  • 41% of cybersecurity leaders cite AI-powered attacks as a top challenge, according to Filigran survey.
  • Chasing false positives and low-priority alerts wastes up to 26% of security teams' time, according to Filigran survey.
  • Only 28% of respondents described their organization as having a continuous, proactive exposure management program in place, according to Filigran survey.
  • Cybersecurity professionals remain cautious about the use of AI for decision-making, with only 8% saying they would trust AI to make security decisions without human approval, according to Filigran survey.