Artificial intelligence is transforming phishing attacks, but the real problem is not the technology, but human management. Security centers receive avalanches of alerts that level 1 teams, underpaid and with high turnover, cannot process. Companies sell advanced AI solutions while cutting qualified personnel, saturating systems with false positives that block legitimate emails.
The bottleneck is not AI, it's human resources 🔥
Technically, generative AI algorithms allow creating more credible and personalized emails, but most attacks are still suspicious links and poorly written texts. The saturation in SOCs (Security Operations Centers) is due to companies hiring the minimum possible staff to save costs, not to the actual volume of threats. Automated tools generate so many false positives that analysts spend the day filtering noise instead of hunting real threats. AI-powered phishing exists, but the fear business is more profitable than investing in stable and trained human teams.
The trick is to sell the alarm, not to turn it off 💡
It is curious that the same companies selling AI solutions to combat phishing are the ones whose level 1 analysts rotate every six months. It is easier to sell expensive software than to pay a decent salary to the person reviewing the emails. Citizens receive more spam than ever, but also see their bank blocking their own transfers by mistake. AI is not going to save us; it has only added another filter between you and your inbox.