CYBERSECURITYTRACKER
TRACKING6,506 stories in this site build1,309 vulnerability news stories in this site build
Permanent story citation

Train, triage, repeat: The AI agent changing how we fight phishing

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 631

As cited

Copy frozen at (site build).

threat intel

Train, triage, repeat: The AI agent changing how we fight phishing

Red Canary has developed an AI agent that combines machine learning, rules engines, similarity analysis, and large language models to classify phishing emails with 94% accuracy. The system demonstrates how hybrid AI approaches can enhance security operations center capabilities by automating phishing triage at scale.

Why it matters: Security teams handling high email volumes can reduce manual phishing classification workload and improve detection consistency, freeing analysts to focus on higher-risk threats and investigation.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

threat intel

Train, triage, repeat: The AI agent changing how we fight phishing

No summary had been written when this copy was frozen.

First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

threat intel

Train, triage, repeat: The AI agent changing how we fight phishing

Red Canary has built an artificial intelligence (AI) agent that combines machine learning, rules engines, similarity algorithms, and large language models (LLMs) to classify phishing emails with 94% accuracy. The system demonstrates an approach to automating phishing detection within a security operations center (SOC) workflow.

Why it matters: Security teams and email defenders managing high phishing volume will benefit from understanding how hybrid AI methods reduce manual triage burden and improve detection reliability.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary