Cofense says Vision now integrates with Google Workspace, enabling security teams to find related phishing messages in Gmail, quarantine or remove them across the organization, restore messages, and track remediation activity.
Cofense argues that phishing defense should measure employees’ ability to recognize threats and connect that competency with real-world phishing and remediation signals, rather than relying on training completion or risk scores alone.
Cofense describes a Global Group ransomware campaign delivered through a fake payment-plan email. The attack uses a PDF lure, ISO and executable files, then encrypts data and threatens victims with public leaks.
Cofense identified a fake ChatGPT subscription invoice that uses urgency and a Google API redirect to send users to a lookalike login page, where entered credentials are stolen.
Cofense describes a phishing campaign impersonating university leaders with fabricated sexual misconduct claims. Links route victims through Google Drive to a malicious Zoho Assist download; healthcare-affiliated universities appear to be the main targets.
Cofense says its phishing-focused AI uses expert-validated threat intelligence to identify related messages, support campaign-wide quarantine, and connect remediation with employee training. The company reports 99.998% accuracy on confirmed threats.
Cofense examines fake software-installation lures, Browser-in-the-Browser phishing, ClickFix, and device-code phishing, showing how attackers exploit trusted browser interactions to steal credentials or deliver malware without exploiting browser vulnerabilities.
Cofense describes mass-distributed email scams impersonating familiar brands, using urgent purchase or password-reset alerts to push recipients to call fraudsters. AI can help generate convincing variations, and some lures link to fake invoices.
Cofense reports a sustained rise in invitation-themed phishing since early 2025. Campaigns spoof event services to steal credentials or deliver remote-access tools, with some links choosing a payload based on the recipient’s device.
The article argues that AI-driven phishing makes individual indicators less reliable and recommends correlating emails at the campaign level, combining automated analysis, human review, employee reporting, and coordinated remediation.