Back Issues This Week → Current Issue → Popular →

SpyCloud's 2026 Phishing Pulse Report finds phishing attacks rising in both volume and sophistication as AI and phishing-as-a-service (PhaaS) platforms let attackers run effective campaigns at scale.

Surveying security professionals at organizations with 1,000-plus employees, the report found 78% saw increased phishing volume over the past year and 84% say AI-generated phishing is more prevalent or harder to defend against.

Technology firms had the highest exposure, followed by airline and automotive industries. Adversary-in-the-middle techniques capture session cookies and refresh tokens, granting persistent authenticated access beyond password resets.

Notably, 68% take four hours or more to remediate, and only 30% have integrated phishing detection with identity response workflows.