www.scworld.com Phishing Attacks Evolve with AI-Driven Personalization
Article Content
- •Phishing volume increased by 29.8% year-over-year, with spear phishing up 41.1%.
- •75% of phishing kits on the dark web now feature AI capabilities.
- •Organizations must adapt training to focus on verification of messages rather than just recognition.
Recent reports indicate a significant shift in phishing tactics, with cybercriminals increasingly utilizing AI to craft hyper-targeted attacks. The KnowBe4 Phishing Threat Trends Report reveals a 29.8% year-over-year increase in phishing volume, with spear phishing attacks rising by 41.1%. Traditional phishing tactics are declining, as attackers leverage legitimate infrastructure and AI tools to create more convincing lures. A 2025 report by SC Media highlighted that 75% of phishing kits on the dark web now advertise AI capabilities. Additionally, Hoxhunt reported a 14-fold increase in AI-generated threats, particularly during tax season. Organizations are urged to adapt their training and awareness programs to address these evolving threats, focusing on verification rather than recognition of familiar signs. The urgency for updated security measures is underscored by the growing sophistication of attacks, which now often bypass traditional security checks.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (5)
Common questions
What types of phishing attacks are increasing?
How are AI tools being used in phishing?
What should organizations do to improve security?
Continue Reading
Critical RCE Vulnerability in Prefab UI Disclosed A critical remote code execution vulnerability, CVE-2026-120338, was disclosed on November 1, 2026, affecting Prefab UI's Generative UI sandbox. The flaw allows attackers to execute arbitrary Python code by exploiting Deno's permissions, enabling file read/write access on the host server. This vulnerability affects…
China-Linked Hackers Exploit PHP2Shell Vulnerabilities to Breach U.S. Government Systems On October 21, 2026, the PHP development team released patches for two critical vulnerabilities in PHP, known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619), which allow unauthenticated remote code execution. These vulnerabilities were actively exploited by a suspected China-linked threat actor who compromised 25…