by Duncan Riley

Phishing defense company Cofense Inc. today unveiled new artificial intelligence-driven detection and automation features for its Phishing Defense Platform aimed at catching coordinated polymorphic phishing campaigns that slip past traditional filters and AI-only tools.

The company says the new features shift away from one-email-at-a-time responses toward action at the campaign level. The release pairs campaign-aware detection with workflow automation and AI-assisted training, with the goal of compressing the window between a phishing attempt landing in an inbox and a security team containing it.

At the center of the release is Vision 3.2, available to customers of Cofense Phishing Remediation. The module uses clustering and pattern matching to identify coordinated attacks across related messages, including campaigns engineered to vary content, senders and delivery patterns to evade detection. Once a campaign is flagged, the platform can quarantine every variant in the cluster and contain related threats in a single action, reducing what Cofense calls the blast radius of a confirmed attack.

Cofense is also shipping Triage 3.0, which routes automated responses based on the reporter’s domain. Security teams and managed security service providers can run multi-domain setups without hand-sorting reports and employees who flag a suspicious email get a reply tailored to their context. Analysts are left to work the cases that actually need a human call.