Will AI Save Consumers From Smartphone-Based Phishing Attacks?

A DarkReading news roundup highlights an uptick in high-impact, actively exploited vulnerabilities and increasingly sophisticated attacks: AI-assisted phishing and browser/agent abuse are bypassing on-device protections; cloud compromises now often begin with bug exploits; and supply-chain and CI attacks (e.g., a tag-poison compromise of Xygeni's GitHub Action) are delivering persistent C2 implants. Notable incidents include active exploitation of a Qualcomm Android zero-day (CVE-2026-21385), a command-injection flaw in VMware Aria Operations being abused to access cloud resources, and Cisco's