Phishing Attack Volume Down 20%, but Risk Still Rising

DarkReading roundup (early June 2026) highlights a shift to higher‑quality, AI‑augmented attacks amid widespread active exploitation of zero‑days and supply‑chain malware. Notable incidents include rapid exploitation of a high‑severity Ivanti/Sentry flaw, active attacks on Check Point VPN, Microsoft Exchange “Ghost‑Sender” spoofing, Russian campaigns abusing WinRAR (CVE-2025-8088), Miasma supply‑chain worm activity against Microsoft repos, PyPI/NPM supply‑chain compromises (Shai‑Hulud / IronWorm / Hades), and public PoCs for Windows Defender bugs. Attackers are also automating EDR‑evasion and扩