Aegis AI Security spent the week spotlighting emerging email and identity threats as it deepens outreach to enterprise security leaders. The company promoted an invite-only CISO roundtable in New York City focused on AI-driven cyber risks, featuring briefings on email security, identity, and fraud under Chatham House Rules.
Claim 55% Off TipRanks
- Unlock hedge fund-level data and powerful investing tools for smarter, sharper decisions
- Discover top-performing stock ideas and upgrade to a portfolio of market leaders with Smart Investor Picks
CTO Ryan Luo, formerly of Google Safe Browsing and reCAPTCHA, is slated to present findings from an analysis of more than 20,000 attacks, underscoring Aegis’s data-driven approach. This curated forum targets high-value accounts and may support enterprise pipeline development while reinforcing the firm’s positioning in AI-focused cybersecurity.
On the research front, Aegis highlighted what it calls Backscatter Phishing, a Secure Email Gateway bypass technique that abuses legitimate Non-Delivery Reports from trusted mail servers. Observed over 30 days, the threat spanned four campaign clusters across three continents, including QR code fraud and voicemail-themed lures that can evade traditional authentication checks.
These findings emphasize the limitations of legacy Secure Email Gateways that rely on sender reputation and protocol validation, pointing to demand for tools that analyze message intent. Aegis is using this research as part of a broader Threat Intelligence Series, which could bolster its brand and credibility among security buyers and partners.
The company also drew attention to a structural shift in phishing trends, citing 2025 FBI IC3 data showing flat complaint volumes but a 208% rise in financial losses. Aegis argues that attackers are moving from broad spray-and-pray campaigns to targeted, payload-less spearphishing that exploits identity and semantic precision.
To address this, Aegis referenced its report “The New World of AI Spearphishing” and an internal capability called Identity-Intent Correlation, aimed at detecting nuanced, AI-enabled attacks that bypass legacy filters. Overall, the week underscored Aegis AI Security’s focus on advanced email and identity-centric threat detection, combining original research with direct engagement of senior security decision-makers.