Malicious Google Calendar invites rose tenfold in a week. Inside a campaign that auto-creates events from stolen mailboxes and installs a signed RMM agent.

Yes, attackers bypass Microsoft MFA. The Mirage2FA AiTM kit relays the real login and takes the session cookie the moment MFA clears. Here is how it works.

A credential phishing email with no malware opened a Microsoft 365 mailbox at IEH Corporation, a U.S. defense supplier. How the account takeover worked.

A $250-a-month phishing kit turned a legitimate Microsoft sign-in feature into a way to steal Microsoft 365 access without a password, a credential form, or a single attacker-owned domain, then staged its own shutdown and kept running under a new name.

TIDALGUEST is a self-replicating invitation phishing cluster that turns each stolen inbox into a new sender and layers five evasion techniques past URL scanning.

We built an AI agent that runs spear-phishing the way attackers now run it, against your own people, scoped and approved by your security team, so you see who clicks before a real attacker finds out.

We are taking the same agents that read your email to stop phishing and pointing them at a new problem: the AI and SaaS apps your team adopted without telling anyone.

Your most important email shouldn't be in junk. We are taking the exact same agentic reasoning that stops advanced phishing and malware, and applying it to the rest of your mail.

Backscatter phishing is an emerging threat where attackers exploit legitimate Non-Delivery Reports (NDRs) to bypass Secure Email Gateways (SEGs). By sending emails to non-existent addresses with a spoofed From field, attackers force legitimate mail servers to bounce a notification, containing the original malicious payload, directly to the intended victim. Since these bounce messages originate from trusted, RFC-compliant Mail Transfer Agents (MTAs) and pass SPF and DKIM checks, they are often invisible to traditional security tools.

Attackers stopped writing malware. They started writing emails. This paper breaks down the $11.64B shift from payload-based attacks to identity exploitation — and why your existing stack can't see it coming.

New research from AegisAI reveals that AI-generated email attacks grew 5X in 2025, with sophisticated threats now bypassing traditional security filters more than 50% of the time. In response to this escalating threat landscape, the company is pre-announcing Project Vanguard, the industry’s first proactive defense specifically engineered to defeat adversarial CAPTCHAs. Built by the team behind Google’s reCAPTCHA, Project Vanguard applies decades of elite bot-defense experience to neutralize the next generation of AI-driven exploits.

Learn how LangChain uses AegisAI to stop thousands of AI-generated phishing attacks, deployed in under 5 minutes.

Master the DMARC Transition: A Risk-Free Path to Full Email Enforcement in Google Workspace + Microsoft 365

Part 2 of 6: AI Security Market Analysis Series

Part 1 of 6: AI Security Market Analysis Series

LangChain, the leading AI agent platform, partners with Aegis AI's autonomous security agents to defend against AI-powered phishing and email threats.

Threat actors deploy SimpleHelp RAT via sophisticated SSA phishing.

A native-controls checklist to stop BEC and AI phishing in Microsoft 365 and Google Workspace, plus the post-click hardening most orgs miss.

Fighting Fire with Fire: How Semantic Defense Catches the Invisible

Why C-Suites Face 51% of All AI Attacks

Anatomy of a Hack: How AI Clones Your Company in 3 Steps

Everybody sells “AI for email security.” The difference between hype and value comes down to three words: Detect, Explain, Act.

AI agents are finally delivering real security outcomes. The first place that shows up? Your inbox.

A smishing attack at Mixpanel exposed OpenAI API user metadata and blew open a bigger question: which of your vendors are quietly sending data to OpenAI or custom models? Break down the hidden AI supply chain and what to do about it.

Phishing click rates are up 190% in 2024. New research from Aegis AI reveals why AI-powered attacks are following the "S-Curve" of SaaS adoption.

From deepfake ads to 'HR bonus' phishing, AI has changed the game this holiday season. Here are the 5 threats IT Admins need to warn their teams about right now—and the corporate risks attached to each.

New research analyzes the "UN Summit" phishing campaign, a textbook example of "Living off the Land" attacks that evade rule and reputation based detection. With 40% of identified government impersonation attacks now originating from spoofed or compromised domains, this post explains why Artificial Intelligence analyzing emails like an analyst is the only viable defense against the next generation of AI Spearphishing.

Why We Started AegisAI

Learn how Lokker thwarts attacks seamlessly while reducing overhead for their security team.

The call is coming from inside the house: How threat actors act as 'internal' users to bypass your security stack.

The Engineering Behind the Defaults: SPF, DKIM, and DMARC Failure Modes Explained

If “AI for email security” is on your roadmap, the real question isn’t what to buy—it’s what to measure.

The era of AI-powered threats requires AI-powered defense. That's why we're proud to announce our $13M Seed Round for AegisAI Security, led by Accel and Foundation Capital. Our mission is clear: to reimagine email security and create a future where every inbox is inherently safe.