A phishing message no longer needs to persuade the employee who owns an inbox. It can target the software reading that inbox on their behalf. That is the central warning of IRONSCALES’ new From Deepfakes to Double Agents: The New Face of AI-Driven Cyber Risk report, which finds that enterprise adoption of tools capable of taking action has moved faster than the security controls surrounding them. In the company-commissioned Censuswide survey, 77% of respondents said an AI agent or tool at their organization had acted on malicious, misleading, or unauthorized content during the previous year. A smaller but still substantial 57% reported at least one confirmed case. Those figures describe respondents’ reports of incidents, including suspected events in the larger total; they are not an independently verified count of successful breaches. The findings arrive alongside a more encouraging development: investment in deepfake defenses increased, while reported financial losses became less severe. Together, the results point to a practical challenge for security leaders: extending protection to automated decision-makers without abandoning defenses built for people. AI Agents Have Access to Systems That Matter Censuswide surveyed 501 U.S. IT and cybersecurity professionals at middle-management level or above, working at companies with 1,000 to...

Audian Paxson, Principal Technical Strategist at IRONSCALES, is a cybersecurity and product strategy veteran with more than two decades of experience spanning email security, threat detection, networking, and enterprise technology. At IRONSCALES, he focuses on product launches, messaging and positioning, go-to-market strategy, and thought leadership around the use of artificial intelligence and machine learning to address emerging email security threats. His career includes senior product management, product marketing, and business development roles at Netgate, BlueCat, Alert Logic, Critical Watch, Iconix, Strix Systems, and Intel. Paxson has played key roles in launching cybersecurity and networking products, developing enterprise go-to-market strategies, and expanding companies into new markets, and is also a co-inventor on patented security technology. IRONSCALES is an AI-powered email security company focused on protecting organizations against phishing, business email compromise, account takeover, deepfakes, and other evolving social engineering threats. Its platform combines Adaptive AI with human and community intelligence to detect, investigate, and remediate threats across Microsoft 365 and Google Workspace, while also providing capabilities for phishing simulation, security awareness training, outbound email protection, and domain security. The company has expanded its approach with specialized AI agents for red teaming, phishing security operations, and phishing simulation, designed to anticipate attacks,...

Business email compromise caused more than $3 billion in reported losses last year, exploiting trust rather than malware to trick employees into sending money or sharing sensitive information. The article explains seven warning signs that email defenses may be missing BEC attempts, from weak behavioral detection to limited visibility into internal email traffic. #BEC #FBIIC3 #IRONSCALES

Email remains the primary attack vector as AI-enabled business email compromise and executive impersonation evade signature-based filters. Leading teams are augmenting Microsoft Defender and Microsoft 365 with inbox-integrated, adaptive AI that detects behavioral anomalies and automates response rather than replacing existing defenses. #Microsoft365 #IRONSCALES

Elastic announced nine new Elastic Security integrations that expand visibility and normalization across macOS, cloud services, email protection, identity and SIEM platforms, each shipping with ingest pipelines and prebuilt dashboards for immediate use. Highlights include macOS Security Events, IBM QRadar migration, Proofpoint Essentials, AWS Security Hub, JupiterOne, Airlock Digital, Island Browser, Ironscales, and Cyera with ECS/OCSF normalization and built-in support for ES|QL, Attack Discovery and the AI Assistant. #macOS #IBMQRadar

The GPT-powered training feature from IRONSCALES saves time for security teams and also ensures comprehensive training for employees.

New IRONSCALES research finds AI speeds phishing response by 16%, but AI-generated attacks are driving higher costs, workloads, and risks.

IRONSCALES debuts 3 AI email security agents & a new threat intelligence series at RSAC 2026, targeting the surge in AI-powered phishing campaigns.

Tyler Swinehart, Director of Global IT & Security at IRONSCALES, has been publishing the kind of LinkedIn pieces I wish more practitioners would write. No vendor angle. No positioning. Just "here's what I learned the hard way operating this thing in production, and here's what nobody told me until it was too late."

We just launched something we've wanted to do for a long time.

IRONSCALES is bringing a new threat intelligence series to the security community, launching “Email Attack of the Day” at RSA Conference 2026 this week. The series publishes daily breakdowns of real phishing attacks detected by IRONSCALES’ Adaptive AI and its community of more than 30,000 security professionals. Each entry covers a single noteworthy attack: what..

A few months ago, I wrote about the Phishing Renaissance and how AI hasn't invented new attack types so much as perfected the classics. Credential theft, vendor impersonation, executive fraud. Same playbook, exponentially better execution.

We’re excited to share that IRONSCALES has been recognized in Expert Insights’ Cybersecurity Excellence Awards – Fall 2025, earning honors in two key categories: Email Security and Security Awareness Training.

Solution Providers Rank IRONSCALES as the Top Performer in Security - Email and Web Today we’re excited to announce that IRONSCALES has earned a 2025 CRN Annual Report Card (ARC) Award in Security - Email and Webfrom CRN®, a brand of The Channel Company. The ARC Awards spotlight the technology vendors providing best-in-class products and solution provider partnership throughout the IT channel ecosystem.

Back in Part 1, we walked through how attackers are using Microsoft 365’s Direct Send feature to spoof internal emails, making those messages look like they’re coming from a trusted domain.

IRONSCALES is thrilled to announce that it has once again been recognized by G2, earning multiple Summer 2025 badges that reflect customers’ satisfaction and the platform’s market impact.

When we first teamed up with Malwarebytes, the goal was ambitious but straightforward: give Managed Service Providers (MSPs) a single, streamlined way to deliver true defense in depth for their customers. That meant uniting industry-leading endpoint protection with adaptive, inbox-level email security so threats could be stopped earlier, remediated faster, and managed without adding complexity.