AI-Driven Phishing Threats Emerge from Browser Vulnerabilities

In 2026, attackers are leveraging AI to rapidly develop and evolve phishing kits, significantly outpacing traditional detection methods that rely on blocklists and IoCs. Employees are increasingly adopting unvetted AI tools and browser extensions, leading to data exfiltration and OAuth permission abuses. The browser has become the critical layer for both attack delivery and AI governance, necessitating deep visibility into browser activity. Phishing domains are now active for less than two days, making them effectively zero-day threats for organizations relying on conventional defenses. The threat landscape is evolving, with no specific software vulnerabilities or patches available to mitigate these risks. The combination of advanced attacker capabilities and widespread uncontrolled AI use in enterprises poses a critical risk to sensitive data and operational integrity.

Key Points: • AI is accelerating the creation of phishing kits, with 18x more device code phishing kits detected in 2026. • Employees are adopting AI tools without oversight, leading to significant data leakage risks. • Traditional security measures are ineffective against rapidly rotating phishing domains and AI-driven attacks.