Spear phishing in 2026: are your controls keeping up?

TL;DR: AI has removed the old friction in spear phishing by automating target research, message drafting, and multi-channel delivery, according to Riot, while traditional spam filtering and “spot the typo” training are increasingly outmatched. The defensive priority is now to reduce the public data available for pretexting and pair that with sharper human verification habits.

Editorial analysis by NHI Mgmt Group, based on content published by Riot: “Spear Phishing in 2026: How AI-Powered Attacks Bypass Traditional Defenses”.

Key questions

Q: What breaks when spear phishing is personalised with AI?

A: Traditional phishing defences fail when the message contains correct names, roles, and context, because people no longer have obvious warning signs to rely on.

Q: Why does reducing public data lower spear phishing risk?

A: Because AI does not invent useful pretext material, it accelerates the reuse of whatever is already public.

Q: What are the signs that a spear phishing campaign is using AI?

A: Look for unusually precise references to recent projects, managers, or company events, especially when the request arrives through more than one channel.

Practitioner guidance

• Run a public footprint audit Search for what an attacker can learn in ten minutes about key employees, org structure, vendors, and live events across public web pages, social media, and data brokers.
• Trim externally visible identity data Remove non-essential details from biographies, org charts, direct reports, and job postings so attackers have less material for targeted pretexts.
• Limit organisational pretext material Review press releases, hiring pages, and finance-related public content for names, workflows, and reporting lines that can be repurposed in a scam.

Bottom line: AI-driven spear phishing is more dangerous because it removes the friction that once limited how many targets an attacker could research and persuade.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →