THU 02 JUL 2026 · GMT EDITION A WHITESTONE INTELLIGENCE PUBLICATION
MARKETS · CYBER · MEMOS · MODELS
DAILY ISSUES26 MAY27 MAY28 MAY29 MAY30 MAY31 MAY01 JUN02 JUN03 JUN04 JUN05 JUN06 JUN07 JUN08 JUN09 JUN10 JUN11 JUN12 JUN13 JUN14 JUN15 JUN16 JUN17 JUN18 JUN19 JUN21 JUN22 JUN23 JUN24 JUN25 JUN26 JUN27 JUN28 JUN29 JUN30 JUN01 JUN02 JUNALL ›
FRONT PAGE / CYBER / CYB-2026-06-12-F2
CYBER · ransomware threat groups · 2026-06-12SCOOP 55

Phishing Attack Volume Down 20%, but Risk Still Rising

Dark Reading reported on June 12 that phishing attack volume has dropped 20% even as overall risk keeps climbing.

·FILED ISSUE 2026-06-12·1 MIN READ·RE-VERIFIED 2026-07-02 UTC·✓ RE-VERIFIED 2026-07-02

At a glance

  • Dark Reading reported a 20% decline in phishing attack volume alongside rising risk.
  • Attackers are reportedly using AI to improve the quality of phishing attacks rather than increase their number.

VERDICT — CONFIRMED

pipeline-backfill confidence · primary + corroborating sources verified · re-verified 2026-07-02 UTC
Cyber desk illustration
Generated desk illustration · The Dossier Wire · not a photograph

Phishing attack volume has dropped 20% even as overall risk keeps climbing, Dark Reading reported June 12.

Attackers are prioritizing quality over quantity, using AI to upgrade individual phishing lures rather than to multiply them, per the report.

The dataset, vendor and measurement period behind the 20% figure were not identified in the available summary, and the Dark Reading article could not be retrieved for detail. The decline and the rising-risk assessment should therefore be attributed solely to Dark Reading's June 12 report pending review of the underlying research; no absolute attack counts, victim figures or named vendors were available in the material reviewed. The quality-over-quantity shift, likewise, is Dark Reading's characterization of attacker behavior rather than an independently verified finding.

Key facts on file

  • Dark Reading reported a 20% decline in phishing attack volume alongside rising risk.
  • Attackers are reportedly using AI to improve the quality of phishing attacks rather than increase their number.

PRIMARY SOURCE

Dark Reading
— (2026-06-12) · fetched at filing · archived at publication
EntitiesDark Reading
Filed underPHISHINGAI

Sources · two-source rule

PRIMARYDark Reading— (2026-06-12)
Share
Filed by the Cyber desk · verified by the verification desk · re-verified 2026-07-02 · Our standards: the two-source rule ›
CITE THIS FILE — The Dossier Wire · cyb-2026-06-12-f2 · filed 2026-06-12 · https://thedwire.com/wire/cyb-2026-06-12-f2-phishing-attack-volume-down-20-but-risk-still-rising.html · Primary and corroborating sources listed above; archived at publication. Republishing & licensing: hello@thedwire.com.
More from Cyber FULL DESK ›
Cyber desk illustration
Generated desk illustration · not a photograph
CYBER · SCOOP 78

CISA Adds One Known Exploited Vulnerability to Catalog: CVE-2026-10520 in Ivanti Sentry

CISA added CVE-2026-10520, an OS command injection vulnerability in Ivanti Sentry, to its Known Exploited Vulnerabilities catalog on June 11, citing evidence of active exploitation. Per the alert, this class of flaw is a frequent attack vector and poses significant risk to the federal enterprise. Binding Operational Directive 26-04, which

✓ verifiednewSOURCE ↗
READ THE FILE ›
Cyber desk illustration
Generated desk illustration · not a photograph
CYBER · SCOOP 65

CISA Flags Hard-Coded Credentials in Yarbo Mobile App and Cloud Infrastructure (CVSS 9.8)

Per CISA's June 11 ICS advisory, the Yarbo Android/iOS mobile application and the vendor's cloud MQTT infrastructure carry hard-coded credentials and missing-authorization flaws rated CVSS v3 9.8. Successful exploitation could let an attacker obtain the hard-coded credentials, access telemetry data, and potentially send operational comman

✓ verifiednewSOURCE ↗
READ THE FILE ›
'RoguePlanet' Defender zero-day PoC drops hours after Microsoft's
Help Net Security
CYBER · SCOOP 67

'RoguePlanet' Defender zero-day PoC drops hours after Microsoft's largest-ever Patch Tuesday

Hours after Microsoft shipped its largest Patch Tuesday ever — nearly 200 vulnerabilities fixed on June 9, including an actively exploited Exchange Server cross-site scripting flaw (CVE-2026-42897) — a researcher using the handle "Nightmare Eclipse" published a proof-of-concept exploit for an unpatched Microsoft Defender zero-day dubbed R

✓ verifiednewSOURCE ↗
READ THE FILE ›

The morning wire in your inbox — every brief, primary sources linked, no noise.

Free tier. The Wire — continuous desk briefs · Records archive · Bureau alerts.

Stored to the wire's subscriber list. No spam, unsubscribe any time.