Crystal Ball Series

Published On : 2026-10-22

Crystal Ball Series

Q3 2026 CHECK-IN • THE ROAD TO DECEMBER

Al will ruthlessly optimize attack reliability

PREDICTION TRACKING: VALIDATED – ON TRACK
EXPECTED TO CLOSE: VALIDATED — ON TRACK

Then, now and next

WHAT WE SAID (JAN 2026)

90%+ of attacks fully automated end-toend
Phishing/ vishing success 15-30% via real-time Al profiles
Cost per successful intrusion drops 70-90%

WHAT MID-YEAR SHOWED (JUN 2026)

80%+ of cyberattacks now use Al
82.6% of phishing emails are AIgenerated
87% of organisations hit by an Al attack this year

WHAT TO EXРЕСT BY DECEMBER

First fully autonomous campaigns documented recon to exfiltration with no human in the loop – the gap between “Al-assisted” and “Al-run”
Success rates enter our band phishing/ vishing hit rates of 15-30% in H2 simulation and incident data
Agentic tooling reaches the market attack agents traded in criminal forums, tracked via CYFIRMA dark-web monitoring

Mid-year evidence

80%+ of cyberattacks now involve Al in some form
82.6% of phishing emails are Al-generated (+53.5% YoY)
95% lower attacker cost for Al spear-phishing at human success
87% of organisations hit by an Al-driven attack this year

Al has industrialised the attack lifecycle. Every building block is a commodity; the fully autonomous campaign is the last piece still emerging.

OUR H2 OUTLOOK
Confirmed on cost, volume and reliability. December grades this “ahead” only if autonomous end-to-end campaigns are documented; otherwise it closes a firm “on track”.

DECEMBER CONFIDENCE

Tracking the numbers — January forecast, mid-year evidence, latest published data

NEXT: END-OF-YEAR VERDICT — DECEMBER 2026
Final verdicts on all 10 predictions, plus the first look at the Crystal Ball Series 2027.

MID-YEAR 2026 UPDATE

Al will ruthlessly optimize attack reliability

PREDICTION TRACKING: VALIDATED — ON TRACК

What we said vs. what 2026 is showing

WE PREDICTED (Jan 2026)
90%+ of attacks fully automated end-to-end Phishing/vishing success 15-30% via real-time Al profiles Cost per intrusion drops 70-90%

WHAT’S HAPPENING NOW
80%+ of cyberattacks now use AI 82.6% of phishing emails are Al-generated Al phishing matches humans at 95% less cost 87% of orgs hit by an Al attack this year

Mid-year evidence

80%+ of cyberattacks now involve AI in some form
82.6% of phishing emails are Al-generated (+53.5% YoY)
95% lower attacker cost for Al spear-phishing at human success
87% of organizations hit by an Al-driven attack this year

OUR UPDATED POSITION
On track. Al has industrialized the attack lifecycle – cheaper, faster and more reliable across recon, delivery and exploitation. Fully autonomous end-to-end campaigns are stillemerging, but every building block is now a commodity. Defenders must assume highly personalized, high-volume attacks and counter with Al-driven detection, identity hardening and phishing-resistant authentication.