WE PREDICTED (Jan 2026)
90%+ of attacks fully automated end-to-end Phishing/vishing success 15-30% via real-time Al profiles Cost per intrusion drops 70-90%
WHAT’S HAPPENING NOW
80% + of cyberattacks now use Al 82.6% of phishing emails are Al-generated Al phishing matches humans at 95% less cost 87% of orgs hit by an Al attack this year
80%+ of cyberattacks now involve Al in some form
82.6% of phishing emails are Al-generated (+53.5% YoY)
95% lower attacker cost for AI spear-phishing at human success
87% of organizations hit by an Al-driven attack this year
OUR UPDATED POSITION
On track. Al has industrialized the attack lifecycle – cheaper, faster and more reliable across recon, delivery and exploitation. Fully autonomous end-to-end campaigns are still emerging, but every building block is now a commodity. Defenders must assume highly personalized, high-volume attacks and counter with Al-driven detection, identity hardening and phishing-resistant authentication.
Manual or semi-manual reconnaissance
Campaign setup times measured in days to weeks
Automated scanning exceeded 30,000 – 50,000 targets per second
Al-generated phishing, vishing, and exploit targeting at scale
Phishing success rates ~8-12% with basic personalization
90%+ of attacks will be fully automated end-to-end
Phishing and vishing success rates
using real-time, individualized Al profiles
Detection advantage reduced to minutes or eliminated entirely
