Security+ Is Getting a Major Overhaul — Here's What Else Is Changing This Fall

August 3, 2026 — The CCSP update landed on Friday as scheduled. Now attention shifts to what's coming next: a new Security+ version on the horizon, ISC2's entry-level cert tightening its AI content with less than a month to go, and a workforce gap that just keeps widening. Here's the rundown.

News CompTIA Security+ SY0-801 is targeting a late 2026 launch — with AI baked in from the start. Training providers are pointing to a preview around October 20 and general availability around mid-to-late November 2026. The headline change: SY0-801 adds dedicated coverage of Large Language Models (Objective 2.4) and AI-driven threats and vulnerabilities (Objective 2.6). If you're mid-prep on SY0-701, that exam isn't going away immediately — retirement is expected roughly six months after 801 reaches GA, putting it around mid-2027. But the window to test on 701 is closer than it looks. (Source: Training Camp, CertCrush) ISC2 CC exam changes go live in 29 days — on September 1. The Certified in Cybersecurity refresh integrates AI security concepts across all five domains, with domain name changes and weight shifts. Candidates testing before September 1 use the current outline; testing after that date means you're on the new one. If you're close to ready, now is a good time to lock in a test date on the current outline rather than wait and have to adjust. (Source: ISC2 Community, Certcy) ISC2 is building a brand-new AI security certification — and wants practitioners to help write it. Announced July 15, ISC2 is opening a call for volunteers to define the knowledge, skills, and abilities for a new vendor-neutral AI security credential. A pilot exam is targeted for late 2026. If you're working in AI/ML security or governance, this is worth watching — and contributing to. (Source: PR Newswire, ISC2) The global cybersecurity workforce gap is now estimated at 4.8 million unfilled roles. Close to 90% of organizations report critical skills shortages, and the roles hardest to fill aren't entry-level — they're incident response, penetration testing, cloud architecture, and threat hunting. The practical upshot: credentials still matter, but demonstrable skill (labs, simulations, practice exams) is increasingly weighted alongside them in hiring. (Source: SpectraForce, SANS Institute) About 33% of cybersecurity roles are now filled without a traditional degree. Skills-first hiring is becoming a real pattern, not just rhetoric — especially for cloud security, SOC automation, and application security roles. Certifications remain one of the clearest signals employers can evaluate when screening candidates without degree filters. (Source: SpectraForce) Study & Passing Tips

Set a test date before you feel ready. A scheduled exam creates a deadline that passive studying doesn't. Most people who keep studying "until they feel ready" study longer than necessary — and often don't retain material as well as someone working backward from a fixed date. Pick a date that's 4–6 weeks out from where you are now, then structure your remaining prep around it.

Study the exam objectives line by line, not just the book. Every CompTIA, ISC2, and ISACA exam publishes a detailed objectives document (free, downloadable). Go through each bullet point and honestly rate your confidence: strong, shaky, or blank. Spend time in inverse proportion to confidence — the high-confidence material will take care of itself. This matters especially right now when exam outlines are changing.

Read the rationale explanations, not just "correct/incorrect." If you're using practice questions and just checking whether you got it right, you're leaving most of the value on the table. The explanation of why each wrong answer is wrong — and what distinction separates it from the right one — is where exam-style thinking actually develops.

Use spaced repetition for definitions and acronyms. Flashcard tools like Anki let you review concepts at intervals calibrated to how well you know them. This is particularly effective for dense acronym-heavy material (think: CASP+, CISSP, CISM) where vocabulary overload is a common failure mode.

How Test Prep Lite Can Help

With Security+ SY0-801 arriving this fall and the ISC2 CC outline changing September 1, the window on current exam content is tightening — which makes focused, domain-level practice more useful than broad review. Test Prep Lite's questions are organized by cert and domain, so you can target the areas you've rated as shaky rather than grinding through material you already know. If you're working toward any CompTIA, ISC2, or ISACA credential, it's worth a look: https://app.testpreplite.com

Also Worth Knowing

If you want to volunteer to help shape ISC2's new AI security certification, the call for subject matter experts is open now. Details are on ISC2's website — it's a real opportunity to influence what becomes the field standard for AI security credentialing. The September 1 CC outline change also means study materials published before the refresh may be partially outdated; confirm your prep resources align to whichever outline you'll be tested on.

Sources: Training Camp — SY0-801 release date · CertCrush — SY0-801 vs SY0-701 · ISC2 Community — CC exam changes · Certcy — CC exam changes 2026 · PR Newswire — ISC2 AI cert development · ISC2 — AI cert volunteer call · SpectraForce — cybersecurity hiring trends · SANS Institute — 2026 cyber workforce