AI Phishing Is No. 1 With a Bullet for Cyberattackers

A large DarkReading digest highlights a surge in AI-enabled phishing (including highly personalized 1-to-1 attacks) and multiple active threat trends: DPRK Lazarus/ClickFix campaigns targeting macOS, Tropic Trooper targeting home routers and Japanese entities, Chinese APTs abusing cloud apps to spy on Mongolia, and China-backed industrialization of botnets. Critical and actively exploited vulnerabilities are called out — notably a critical Bomgar RMM RCE (CVE-2026-1731) — plus three proof-of-concept Windows Defender exploits (two unpatched), an NGINX MCP integration flaw, and an RCE in Googleʼ