Perly Consulting │ Beck Eco

The State of Play

A living index of AI adoption across industries — where established practice meets the bleeding edge
UPDATED DAILY

The AI landscape doesn't move in one direction — it lurches. Some techniques leap from experiment to table stakes in a single quarter; others stall against regulatory walls, technical ceilings, or organisational inertia that no amount of hype can dislodge. Knowing which is which is the hard part. The State of Play cuts through the noise with a rigorously maintained index of AI techniques across every major business domain — classified by maturity, evidenced by real-world adoption, and updated daily so you always know where you stand relative to the field. Stop guessing. Start knowing.

The Daily Dispatch

A daily newsletter distilling the past two weeks of movement in a domain or two — delivered to your inbox while the index updates in the background.

AI Maturity by Domain

Each dot marks the weighted maturity of practices within a domain — hover for a brief summary, click for more detail

DOMAIN
BLEEDING EDGEESTABLISHED

Phishing detection & prevention

GOOD PRACTICE

TRAJECTORY

Plateau

AI that identifies phishing attempts across email, messaging, and web, including sophisticated spear-phishing campaigns. Includes NLP-based email analysis and URL reputation scoring; distinct from data loss prevention which protects outbound data rather than detecting inbound threats.

OVERVIEW

AI-powered phishing detection is a proven, widely deployed practice — but it faces a critical bifurcation in 2026 between technical capability and operational effectiveness. Detection research and vendor platforms have reached theoretical maturity: models exceed 97% accuracy in controlled settings, production deployments block billions of emails monthly, and the ecosystem spans leading vendors (Proofpoint, Barracuda, Cofense) to specialized entrants (Abnormal, IRONSCALES). Yet real-world evidence reveals persistent gaps. UK government data shows 38% of businesses report phishing attacks and 85% of breached organisations involve phishing in the attack chain. Real-world deployments reveal detection failures: large organisations consistently find 3,000+ phishing emails missed quarterly by leading platforms, while attackers have systematised response with phishing-as-a-service (90% of high-volume campaigns) and AI-assisted code generation (hybrid human-AI attacks achieving 54% click-through vs 12% human baseline). The defining tension is not technical but operational: the organisations deploying pure-detection play defenses face attackers adapting faster than filters improve, with multi-channel tactics (email, Teams, calendar, reverse proxies) overwhelming email-only controls. Practitioner surveys confirm overconfidence masking underpreparedness: 86% of attacks now use AI while only 17% of organisations deploy AI-powered defences. The practice remains on a plateau—mature capability coexisting with expanding threat surface and human-factor limitations that no detection improvement overcomes.

CURRENT LANDSCAPE

July 2026 telemetry confirms an inflection in attacker tactics toward post-authentication vectors while AI-powered phishing reaches human-level sophistication. Adversary-in-the-middle (AitM) and OAuth consent phishing have emerged as the dominant credential-theft mechanism: Tycoon2FA and related campaigns reached 500,000+ organizations with 40,000 incidents detected daily, employing CAPTCHA evasion and MFA-bypass infrastructure at industrial scale. Real incident data now shows AitM attacks achieving 84% MFA failure rates, collapsing the assumption that multi-factor authentication alone protects against modern phishing. Peer-reviewed research validates the escalation: AI-automated spear phishing now matches human expert performance at 54% click-through rates (vs. 12% for traditional campaigns), while AI-generated attacks have grown from 40% of volume (mid-2024) to 86%+ prevalence. Detection capability has simultaneously matured: Red Canary's orchestrated AI subagent deployment achieves 94% accuracy with transparent reasoning, Abnormal's behavioral baseline approach protects 3,200+ organizations including 25% of Fortune 500, and Proofpoint's multi-vendor benchmarking shows 27.1% additional threat detection beyond leading cloud platforms.

Yet real-world effectiveness gaps persist. Behavioral AI detection successfully blocks sophisticated attacks (Australian Football League prevented 8M+ threats monthly at 99.99% effectiveness), but 20% of phishing attacks still bypass enterprise detection at the browser layer where late-stage redirects and CAPTCHA overlays execute. Post-delivery analysis shows 30% of business email compromise emails land in inboxes despite passing technical filters—evidence that context-aware detection exceeds message-scoring capability. The multi-channel fragmentation documented in May continues through July: calendar phishing, Teams-based attacks, and reverse proxy credential interception remain elevated, forcing detection systems to correlate signals across identity, access, and email layers rather than treating inbox defense in isolation. Detection latency compounds the gap: AI-generated phishing variants reach production at machine speed, outpacing signature-based defenses' ability to fingerprint novel payloads. The foundational constraint remains organizational: 86% of attacks use AI while only a fraction of enterprise deployments employ behavioral AI detection, signaling that mature technical capability exists but organizational adoption and skill gaps limit operational impact.

TIER HISTORY

ResearchJan-2017 → Jan-2017
Bleeding EdgeJan-2017 → Jan-2018
Leading EdgeJan-2018 → Jan-2019
Good PracticeJan-2019 → present

EVIDENCE (191)

— Critical negative signal: 89% of phishing domains active <2 days; 25+ device code phishing kits in wild; 95% use bot protection evasion. Demonstrates indicator-based defenses structurally inadequate against AI-accelerated infrastructure rotation and automated page generation.

— Cisco Talos independent incident response data: phishing primary attack vector in >50% Q2 2026 engagements (up from 33% Q1); 65% involved authentication abuse; ARToken phishing-as-a-service exposed 80+ API endpoints. Documents attacker adoption of evasion and credential-theft platforms.

— IBM/Ponemon Cost of Data Breach study (602 orgs): AI-driven attacks increased 56% YoY, adding USD 1M per breach; attackers can 'generate persuasive phishing content, adapt malware and test exploits at machine speed.' Quantifies deployment impact and attacker AI adoption.

— Microsoft Threat Intelligence Q2 2026: 7.6B phishing threats detected; Tycoon2FA disruption achieved 92% volume decline; QR code phishing peaked 18.7M (March), declined 38% (May). Documents both detection scale and threat evolution adaptation to evasion techniques.

— Production detection examples with monthly scale metrics: 4.9M brand impersonations, 46K QR phishing, 242K CEO impersonations, 960K Bayesian-poisoning detected monthly. Demonstrates multi-layer AI detection of evasion techniques in real-world deployment.

— PRISMA systematic review of 36 studies (2023-2025) across IEEE/ScienceDirect/ACM/Scopus showing LLMs accelerate and automate phishing processes while advancing defensive capabilities; LLM-based detection approaches outperform traditional ML and approach human-level performance.

— Barracuda threat research on evasion technique: 1M+ retail-themed campaigns since April 2026 using CSS/HTML to hide benign text, diluting malicious keyword concentration. Demonstrates attacker adaptation targeting AI filters and LLM detection limitations; LLMs lack user-perspective rendering.

— Named fintech deployment: behavioral AI detects phishing attacks missed by legacy secure email gateway; fast incident response with transparent remediation. Demonstrates real-world deployment advantage of behavioral detection over rule-based systems.

HISTORY

  • 2017: Phishing detection established as mature research discipline with widespread organizational awareness but selective AI-based defense adoption. Major vendor launches (Sentinel, Triage expansion) and documented deployments reducing susceptibility from 28% to under 10%; however, 64% of organizations lacked third-party solutions despite high threat volume and sophistication in campaigns like FreeMilk.
  • 2018: Vendor market consolidation and scale-up with Barracuda reaching 50,000+ customers (232% YoY Essentials growth) and Cofense's $400M acquisition by private equity, backing 10M+ workstation deployments. Enterprise validation through Fortune 500 testing showed Barracuda Sentinel outperforming Microsoft ATP by 621 missed attacks in side-by-side trial. Adversarial AI research (DeepPhish) demonstrated evasion capabilities accelerating in parallel with defense (0.69%→20.90% evasion rates), and real-world incidents at security-aware organizations (FS-ISAC phishing spread) revealed persistent human-factor vulnerabilities despite technical maturity.
  • 2019: Market consolidation and analyst validation with Cofense and Barracuda earning Gartner and Forrester recognition. USENIX Security 2019 research documented lateral phishing incidents across 92 organizations with 87.3% detection rates; separate Barracuda research showed cloud infrastructure (AWS, Azure) as phishing origin sources with deployed classifiers improving detection 3-5%. Global deployment expansion visible with Cofense entering Japanese market via managed services. Check Point analysis flagged detection gaps in cloud email platforms (Office 365, Gmail), highlighting architectural tensions as enterprises migrated.
  • 2020: Threat landscape intensity increased sharply with mobile phishing attacks rising 328% in Q3 while email gateways matured. Research methodologies advanced (NIST Phish Scale standardized training evaluation; comprehensive AI detection survey published). Vendor maturity demonstrated through international expansion and industry awards (Barracuda SC Awards for AI/ML in email security). However, critical vulnerabilities exposed limitations: Proofpoint URLDefense sandbox bypass (770+ character URLs) revealed gaps in production detection tools. Deployment infrastructure challenges persisted with tension between legacy email gateways and cloud-native solutions (Office 365, Gmail) as attack vectors diversified.
  • 2021: Market solidification continued with major platform GAs: Microsoft Attack Simulation Training launched integrated into Defender for Office 365; Barracuda released three new Email Protection plans validated by SE Labs as best in class; new entrants like Phished and dPhish provided alternative approaches to simulation and detection. Real-world deployments confirmed practice maturity with manufacturing and enterprise cases showing 30-50% email reduction and strong adoption metrics. However, attack success remained high: Proofpoint data showed 57% of organizations experienced successful phishing in 2020 with 34% paying follow-up ransoms, and CVE-2021-31608 revealed a URL bypass vulnerability in Proofpoint itself. Cross-customer threat intelligence sharing (demonstrated at Black Hat via Cofense) emerged as an emerging mitigation pattern, but detection limitations persisted.
  • 2022-H1: Vendor ecosystem expanded with new entrants (NVIDIA Morpheus with 99.68% accuracy) while established players consolidated. Threat volume accelerated: phishing attacks grew 29% globally to 873.9M annually with 400% surge in retail/wholesale. Real-world deployments (ACCO Brands with 6,000 users, Kappa Data) showed continued adoption and marginal improvements in awareness and team efficiency. Research advances: evasion-resistant detection models (Anti-SubtlePhish) achieved 98.8% accuracy but training effectiveness studies revealed fundamental limits—training alone insufficient to prevent user susceptibility, signaling maturity plateau where technical gains face persistent organizational barriers.
  • 2022-H2: Proofpoint's Supernova behavioral engine demonstrated large-scale efficacy, blocking 19M BEC/phishing attacks monthly and preventing a $194M theft among select customers. Training improvements measurable: KnowBe4 benchmarking 9.5M users showed phishing click rates dropping from 32.4% baseline to 5% after 12 months training. Research on AI-generated phishing and psychological trait scoring advanced detection techniques. However, critical incident exposed vulnerability: September 2022 Barracuda email security gateway outage caused global email delays, revealing infrastructure reliability concerns despite vendor maturity. Practice showed technical progress alongside operational and human-factor bottlenecks.
  • 2023-H1: Cloud-native ML pipelines accelerated deployment speed (Barracuda on Databricks blocking tens of thousands daily); Check Point's Zero Phishing GA claimed 4x zero-day detection. Research identified AI-generated phishing (71% undetected) and novel attacker tactics (11-15% of orgs hit). Analyst validation continued (Forrester Wave, Gartner Market Guide), but emerging threat sophistication—especially adversary-generated content—revealed structural limitations in purely technical defenses. Tension between detection capability advancement and threat evolution remained unresolved.
  • 2023-H2: Vendors expanded capabilities (Cofense vishing service, Proofpoint AWS Marketplace integration, Barracuda 950B event analysis across customers) and analyst recognition held. However, AI-driven threat acceleration became undeniable: 1,265% increase in malicious phishing since ChatGPT, 31,000 daily attacks. Detection systems degraded year-over-year: Microsoft Defender missed 25% more phishing, secure email gateways missed 29% more in 2023 vs 2022. IBM study showed ChatGPT-generated emails matched human-crafted campaigns in click effectiveness. 71% of AI-generated attacks evaded production detection. Practice reached inflection point where threat evolution outpaced defense advancement.
  • 2024-Q1: Vendor scale continued (Barracuda Sentinel ecosystem integration) and research advanced with IEEE Access study documenting GPT-4 phishing at 30-44% CTR and LLM detection trade-offs. However, production deployment fragility emerged: Proofpoint Attachment Defense outage at major university left emails unscanned; Cofense metrics showed SEGs missing 30-50% of threats with malicious bypasses increasing 100%+ YoY. Offensive AI tooling adoption accelerated (WormGPT, FraudGPT) with deepfakes enabling $25M attacks. Practice demonstrated sustained technical advancement masked by widening detection gaps in production systems—commodity AI tools now accessible to attackers, detection evasion techniques outpacing traditional ML defense models.
  • 2024-Q2: Vendor innovation accelerated with Proofpoint GA of LLM-based pre-delivery detection (NexusAI) and Adaptive Email Security platform updates; Barracuda continued ML pipeline scaling blocking tens of thousands daily. Threat landscape intensified: Zscaler documented 60% YoY increase in AI-driven attacks across 2B blocked transactions; BEC attacks grew to 10.6% of social engineering vectors with 70% surge in conversation hijacking. Research showed detection capability maturity (NTT ChatSpamDetector 99.70% accuracy) alongside robustness limitations (451k site evaluation revealed >93% false positive rate in visual detection). Practitioner overconfidence emerged: 96% of security professionals perceive GenAI threat yet 73% overestimate their deepfake detection ability, exposing perception-reality gap in organizational defenses.
  • 2024-Q3: ML research matured (274K-URL study: 97.52% accuracy; LLM-human framework: 80%+ effectiveness) while deployment dynamics shifted: Fortune 1000 manufacturer replaced Proofpoint with Abnormal AI citing 10x better detection and $876k savings, signaling vendor-neutral migration patterns. Threat acceleration continued: 40% of BEC attacks AI-generated; Microsoft 365 native security showed 47% phishing miss rate (70% for BEC), exposing platform dependency risks. Organizational investment surged: 75% of CISOs identified phishing as greatest AI-powered threat with 70% increasing budgets, yet 58% cited lack of expertise. Practice reached mature plateau where technical sophistication (detection accuracy near 97-99%) coexisted with widening real-world deployment gaps driven by mainstream platform limitations and accelerating attacker AI adoption.
  • 2024-Q4: LLM-based phishing research matured with frameworks improving detection robustness (PEEK raising training samples from 21.4% to 84.8%, boosting accuracy to 88%+) and adversarial approaches (PEN reducing attack success by 70%); human-subject studies validated AI-automated spear phishing at 54% CTR matching human experts, with AI detection exceeding 90% accuracy. Real-world deployments revealed critical gaps: Fortune 500 insurer detected 6,454 Proofpoint-missed attacks in three months, signaling that vendor market leadership masks persistent detection failures. Attacker adoption accelerated with 500K+ quishing campaigns in three months and LLM-generated emails becoming production threat; open-source detection reached 95-96% accuracy, democratizing defenses. Practice remained at inflection point: technical capability plateaued near theoretical maximums while threat sophistication and deployment fragility continued diverging, with attacker AI and evasion tactics outpacing vendor mitigation in mainstream platforms.
  • 2025-Q1: Vendor platform maturity deepened with Proofpoint Core Email Protection GA (99.99% threat block rate), Barracuda ML pipeline enhancements, and academic research advancing detection to 96.8% accuracy with reduced false positives. Channel expansion accelerated through Proofpoint-ConnectWise MSP integration enabling SMB deployment at scale. Threat landscape showed mixed signals: KnowBe4 reported 82.6% of phishing emails using AI with 76.4% polymorphic tactics and 17.3% volume increase; UC Berkeley warned of hyper-targeted AI-powered phishing becoming mainstream. Critical counter-signal emerged: Hoxhunt analysis from 2.5M users across 131+ countries found only 0.7-4.7% of phishing emails actually AI-generated, revealing hype-reality gap while human-crafted phishing remained dominant vector. Practice showed simultaneous technical advancement and threat acceleration with persistent deployment fragility in mainstream cloud platforms.
  • 2025-Q2: Attacker AI adoption accelerated with 51% of spam and 14% of BEC emails AI-generated by mid-year; threat volume surged with 70% YoY BEC increase and one malicious email every 42 seconds tracked by Cofense. Vendor platform capabilities matured: Barracuda launched multimodal AI sandbox with 3x detection power and 8x speed; Proofpoint and Cofense reported strong threat block metrics. However, real-world detection gaps persisted: global aerospace manufacturer deploying Abnormal alongside Proofpoint detected 3,232 missed attacks over three months ($5.8M exposure). Analyst perspectives highlighted fundamental tensions—AI-powered defenses advancing in capability, but plagued by false positives, privacy concerns, and organizational skill gaps limiting effective deployment. Practice showed highest evidence of simultaneous vendor capability advancement and attacker AI adoption with persistent deployment fragility and cost impact on real organizations.
  • 2025-Q3: Research consensus solidified with peer-reviewed systematic review confirming >99% accuracy for DL/Gen AI models (CNN, LSTM, TCN); controlled study (N=480) validated AI-generated training for user resilience without complex personalization. Market maturity accelerated: global phishing simulator market reached $113B with 7.2% CAGR; Proofpoint Prime deployments showed 237% ROI over three years. Vendor innovation continued with Barracuda multimodal AI analyzing text, images, URLs, and QR codes. However, deployment barriers persisted: practitioner feedback highlighted high costs, complex interfaces, and localization gaps in market-leading solutions, exposing organizational friction masking adoption metrics. Practice demonstrated maturity with technical capability and market validation coexisting alongside real deployment constraints limiting broader impact.
  • 2025-Q4: Research field maturity confirmed via peer-reviewed bibliometric analysis of 1,096+ documents showing decisive shift from ML to deep learning; attacker AI adoption (82.6% of phishing) and training effectiveness remained contested (54% CTR for AI phishing vs vendor claims of 86% ROI). Critical infrastructure vulnerability exposed: Proofpoint misconfiguration exploit enabled 3-14M spoofed emails daily. Healthcare sector phishing-triggered ransomware reached $10M+ recovery costs per incident. Ongoing enterprise adoption (Chicago Blackhawks) indicated continued platform deployment in vertical markets. Practice reached mature technical plateau (>99% accuracy in controlled research) coexisting with widening production deployment gaps, attacker AI acceleration, and quantified cost impact, signaling that technical sophistication and market size mask persistent organizational and operational vulnerabilities limiting real-world effectiveness.
  • 2026-Jan: Threat acceleration continued with 400% surge in successful AI-powered phishing scams in 2025. Barracuda threat research showed phishing kits doubled with 90% of high-volume campaigns using phishing-as-a-service, 48% incorporating MFA bypass and URL obfuscation tactics. Real-world deployments remained strong (Benchmark Electronics prevented 90% of incidents, Scalar achieved on-time email delivery), signaling continued platform adoption despite threat sophistication. Critical negative signal: Proofpoint service interruption on January 22 exposed reliability gaps in Microsoft 365 integration. Practitioner analysis predicted 90%+ of credential attacks will use sophisticated kits by end of 2026, with MFA no longer fail-safe. Practice sustained mature technical plateau coexisting with accelerating threat sophistication, organizational demand for advanced detection, and persistent platform reliability concerns limiting effectiveness in production environments.
  • 2026-Feb: Research validation of dual-use AI published (LLM-automated phishing 54% CTR vs human experts, AI detection 97.25% accuracy with zero false positives), confirming technical parity but highlighting organizational deployment bottlenecks. Threat acceleration continued sharply: Cofense reported AI-powered phishing doubled pace to one attack every 19 seconds, with polymorphic attacks (76% unique URLs) and conversational attacks (18% of malicious emails) becoming standard; cross-industry analysis showed phishing 83% of email threats with 80% AI-powered, collaboration attacks surging 12%→31% YoY. Vendor ecosystem expansion: Proofpoint integrated AWS Security Hub Extended (Nexus AI stack); NTT DATA deployed Proofpoint protecting 6.5M emails daily. Practice revealed structural gap: research-validated defensive capability (97%+ accuracy) exceeded organizational deployment speed and cost constraints in production, with traditional gateway defenses and pattern-matching filters remaining ineffective against polymorphic, AI-generated attacks. Maturity plateau confirmed with synchronized threat acceleration and growing real-world ineffectiveness in mainstream deployments.
  • 2026-Mar/Apr: Threat landscape documenting phishing-as-a-service ecosystem at scale: Microsoft Threat Intelligence exposed Tycoon2FA reaching 500K+ organizations monthly with MFA bypass, token interception, evasion infrastructure, and coordinated global takedown with Europol; Tycoon2FA accounts for 59% of adversary-in-the-middle phishing, with fake CAPTCHA attacks up 563% in 2025. Real-world attack analysis showed malicious actors appending benign content (157 average line breaks) to bypass NLP detection—evidence of attackers actively targeting and defeating AI defenses. CISA reported a 300% YoY increase in AI-powered phishing with 200+ organizations compromised in 30 days; Kaseya 2026 data shows 83% of phishing emails contain AI-generated content; Netcraft disrupted 1.3M phishing websites in 12 months while documenting a 37% increase in attacks. Microsoft Defender Security Research documented large-scale AI-enabled device code phishing (EvilToken PhaaS toolkit) with dynamic code generation and AI-personalized lures, representing escalation beyond password theft to auth token abuse. Hornetsecurity survey of 500 UK leaders found 57% cite AI phishing as primary worry with 50% uncertain they can defend against AI-powered attacks. Comprehensive threat statistics confirm: AI phishing achieves 54% click rates versus 12% for traditional phishing; phishing simulation market projected to reach $224B by 2034. Human-factor research confirmed critical constraint: UC San Diego Health study found annual training shows 1-2% improvement vs 10-30% real click rates; 75% complete training in <1 minute. Vendor platform maturity: Proofpoint announced agentic workspace security with unified SEG/API architecture and AI governance, with Nexus AI ensemble analyzing 3.4B emails deployed at 85 Fortune 100 companies. However, post-detection gap identified: MDR analysis revealed structural fragmentation across email/identity/endpoint/cloud layers allowing 29-minute average eCrime breakout. Practice sustained mature technical equilibrium (detection 97%+, platforms GA at scale, analyst validation) coexisting with widened real-world deployment gaps, accelerated attacker adoption of phishing-as-a-service, and documented human-factor limitations in operational resilience.
  • 2026-May: Threat acceleration reaches new measurable peaks with broadened operational evidence. KnowBe4 six-month analysis confirms 86% of attacks AI-driven with 7x efficiency over manual campaigns and documents multi-channel fragmentation: calendar phishing +49%, Teams attacks +41%, reverse proxy credential attacks +139%. Barracuda 2026 Email Threats Report (3.1B emails analyzed) shows 1 in 3 emails malicious, 48% phishing, 34% of organizations experiencing monthly account takeover, 90% of campaigns using phishing-as-a-service kits. UK government survey (612K+ organizations) confirms 38% phishing prevalence with 85% of breached orgs involving phishing in incident chain. Microsoft Defender Q1 2026 telemetry: 8.3B phishing blocked but QR phishing (+146%), CAPTCHA attacks (+125%), and HTML-in-attachment delivery (+175%) reveal detection gaps widening as attackers move evasion inside email. Aggregated statistics (89 verified datapoints across IBM, CrowdStrike, Microsoft, Mandiant) quantify the AI-driven acceleration: 54% CTR for AI phishing versus 12% human baseline, 47.3% bypass rate against leading filters, initial-access time collapsed from 8+ hours to 22 seconds. CERT-In formally documented AI-powered phishing bypassing traditional awareness-based detection via realism and contextual accuracy, urging a shift to adaptive defense; analysis across 4,600+ organizations (Abnormal) confirms tactics cluster precisely by organizational structure — file-sharing impersonation 25.1% in finance/accounting, redirect chains 21.6% in SMEs — reinforcing that AI-driven attacks now target organizational workflow gaps rather than generic users. Vendor product innovation: IRONSCALES released three purpose-built AI agents at RSAC 2026 (Red Teaming, Phishing SOC forensics, Simulation); Cofense Vision 3.2 clusters polymorphic campaigns with minutes-to-deployment response. Deployment maturity validated: Shinhan Financial Group's real-time voice phishing system prevented 800M won customer damage in two weeks. Structural negative signal: Mandiant M-Trends 2026 shows vulnerability exploitation (38%) now exceeds phishing (17%) as initial access vector, indicating phishing defenses have matured enough to force attacker pivot away from email. Practice demonstrates simultaneous technical maturation, expanded multi-channel attack surface, and persistent organizational deployment lag (17% AI defenses vs 82.6% AI-driven attacks).
  • 2026-June: Detection capability and deployment economics diverge sharply. Verizon 2026 DBIR (22K incidents) confirms phishing in 62% of breaches with AI-assisted attacks doubling in volume; phishing accounts for 44% of AI-assisted initial access. Zscaler telemetry shows phishing volume declined 20% as defenses matured, yet effectiveness surged via personalization—services industry experienced 65.5% attack surge with 413K AI-generated phishing domains. Critical detection limitations emerge: Darktrace analysis reveals 70% of malicious emails bypass DMARC authentication; 1.6M newly created phishing domains evade blocklists; QR code phishing surged 336%. Browser-layer gaps documented: Menlo Security telemetry (millions of sessions) shows 20% miss rate across enterprise detection systems, with 95.2% of phishing delivered over TLS encryption and 115K evasive campaigns detected in parallel. KnowBe4 Threat Lab confirms 86% AI-assisted phishing prevalence with 54% versus 12% CTR advantage; Barracuda red team demonstrates AI-generated phishing escalating to full endpoint compromise in 5 minutes via ClickFix and Evilginx MFA interception. Defense validation: IRONSCALES Themis AI detected a multi-layer legitimate-service-abuse campaign (EdgePilot, Barracuda LinkProtect wrappers) that defeated gateway authentication; Cisco Secure Email Threat Defense earned SE Labs AAA rating with 98% phishing detection including 100% quishing protection and zero false positives; peer-reviewed PhishLumos framework identifies 192K malicious URLs 8 days faster than expert teams from 600 seed URLs. Practice demonstrates mature research capability (F1>0.97) coexisting with widening operational gaps (20%+ miss rates, 70% DMARC bypass, defenders 36% time-constrained), as attacker sophistication and multi-channel fragmentation continue to outpace detection improvements.
  • 2026-Jul: Peer-reviewed research (hosted by Schneier) confirms AI-automated spear phishing now matches human expert click-through rates (54%) while defensive models (Claude 3.5 Sonnet) reach 97.25% detection with zero false positives, quantifying a roughly 50x attacker profitability increase. Production deployments continue validating behavioral detection at scale — Red Canary's orchestrated AI subagent triage hits 94% accuracy and Forrester TEI documents $4M in prevented losses with 95% SOC-hour reduction across four global organisations — even as adversary-in-the-middle campaigns (Tycoon2FA: 35,000 users across 13,000 organisations) push documented MFA failure rates to 84%.
  • 2026-Aug: Indicator-based defenses continue eroding structurally: 89% of phishing domains stay active under two days and 95% of kits now evade bot protection, while Cisco Talos data shows phishing as primary attack vector in over half of Q2 incident-response engagements (up from a third in Q1). IBM/Ponemon's Cost of Data Breach study quantifies AI-driven attacks up 56% YoY (adding $1M per breach), and Microsoft telemetry logs 7.6B phishing threats in Q2 with a 92% volume decline after the Tycoon2FA takedown; Barracuda research documents attackers using text-salting (hidden CSS/HTML text) to defeat LLM-based filters, and a PRISMA systematic review of 36 studies confirms LLM-based detection now approaches human-level performance even as generation capability accelerates in parallel.

TOOLS