Cybercriminals are increasingly automating not just phishing emails but entire attack workflows.
Add Axios as your preferred source to
see more of our stories on Google.
Illustration: Sarah Grillo/Axios
Cybercriminals are increasingly automating not just phishing emails but entire attack workflows, helping fuel a nearly 15-fold increase this year in phishing attacks that bypass traditional identity verification tools.
Why it matters: The cybercriminal ecosystem is still making gains despite generally lacking the money and compute resources needed to access the most advanced AI systems.
AI-powered scams and identity attacks become top cyber threats in 2026
Webinar: How attackers bypass MFA and how defenders can respond
Building a Security Strategy for AI-Powered Ransomware Attacks
Beyond Blocking: Disrupting the Social Engineering Attack Chain
Webinar: Why email security teams are drowning in alerts
: KnowBe4 says 86% of phishing it tracked used AI, and inboxes are only the start
Hackers are valuing quality over quantity, using AI to upgrade their phishing attacks rather than multiplying them.
AI-driven phishing enables ransomware entry, with 60% breaches linked to human error, leading to $813M payments in 2024.
AI phishing overloads Tier 1 SOCs; ANY.RUN cuts escalations 30% and MTTR by 21 minutes, speeding response.
Researchers have found the first known case of cybercriminals using AI to exploit a zero-day flaw.
Account takeovers are rising as attackers bypass traditional defenses through phishing, session hijacking, and MFA fatigue.…
