Topic starter
24/10/2026 8:51 pm
TL;DR: AI has made spear phishing cheaper, more personalised, and harder to spot by automating research, drafting, and delivery, according to Riot. Public data now matters more because attackers can turn names, roles, and other details into believable pretexts.
Editorial analysis by NHI Mgmt Group, based on content published by Riot: “Spear Phishing in 2026: How AI-Powered Attacks Bypass Traditional Defenses”.
Key questions
Q: Why does reducing public data lower spear phishing risk?
A: Because AI does not invent useful pretext material, it accelerates the reuse of whatever is already public.
Q: What are the signs that a spear phishing campaign is using AI?
A: Look for unusually precise references to recent projects, managers, or company events, especially when the request arrives through more than one channel.
Q: What breaks when spear phishing is personalised with AI?
A: Traditional phishing defences fail when the message contains correct names, roles, and context, because people no longer have obvious warning signs to rely on.
Practitioner guidance
- Run a public footprint audit Search for what an attacker can learn in ten minutes about key employees, org structure, vendors, and live events across public web pages, social media, and data brokers.
- Trim externally visible identity data Remove non-essential details from biographies, org charts, direct reports, and job postings so attackers have less material for targeted pretexts.
- Limit organisational pretext material Review press releases, hiring pages, and finance-related public content for names, workflows, and reporting lines that can be repurposed in a scam.
Bottom line: AI-driven spear phishing is more dangerous because it removes the friction that once limited how many targets an attacker could research and persuade.
Glossary terms: Spear Phishing, Online Footprint, Pretexting, OSINT Framework
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 7 days ago by NHI Mgmt Group
25/10/2026 11:13 am
AI has turned spear phishing into a data exposure problem before it is a delivery problem. The article correctly shows that attackers no longer need large amounts of manual effort to build convincing pretexts. That changes the control point from message inspection alone to the reduction of publicly accessible personal and organisational data. For identity and security teams, the practical conclusion is that footprint governance now belongs alongside awareness.
A few things that frame the scale:
- The IBM/Ponemon 2025 Cost of a Data Breach Report found that phishing-initiated breaches cost an average of $4.8M each.
A question worth separating out:
Q: What should teams do when a user report reveals a real phishing campaign?
A: Contain the campaign by linking the reported email to similar messages across all mailboxes, then remove or block the related messages before the campaign spreads further. The report should also trigger a response to the employee, because the acknowledgement reinforces future reporting and helps sustain the control loop.
👉 Read our full editorial: AI-personalised spear phishing makes footprint control essential
This post was modified 7 days ago by NHI Mgmt Group