Netcraft publishes five cybersecurity predictions

Netcraft published five predictions for 2026 that outlined emerging threat patterns and risk indicators relevant to security leaders and digital risk teams.

The company provided forward-looking intelligence intended to help prepare for rising threats and evolving digital risks, noting trends that affect operational and strategic planning for organizations identified in the release.

The researchers described new vulnerabilities tied to Artificial Intelligence (AI) systems, including risks such as data leakage, workflow manipulation, unintended access to sensitive information, and the potential use of AI agents for reconnaissance, data exfiltration, and automation of ransomware activities; they also reported the prospect of manipulating AI agents themselves.

The report highlighted the expansion of Phishing-as-a-Service and a rise in OAuth phishing as deceptive tactics, cited pervasive high-severity vulnerabilities affecting web-facing services including React2Shell and issues in network devices such as FortiWeb and F5 BIG-IP, and outlined seasonal and event-driven attack patterns tied to tax deadlines, the 2026 Winter Olympics, U.S. midterm elections, holiday travel, and hospitality brands.

Netcraft said the predictions came from its team of threat researchers and included operational metrics about its activity, stating that it had taken down nearly one-third of the world's phishing sites and had blocked more than 225 million malicious URLs.

“In 2026, we'll see continued growth in Chinese Phishing-as-a-Service operations, more convincing video deepfakes, and increasingly coordinated multi-channel scams. AI will introduce new risks, such as prompt injection, while enhancing the quality and scale of existing fraud. Defenders will need to adapt just as quickly, relying on earlier insight and faster disruption to stay ahead. At Netcraft, we're concentrating on shortening that gap and surfacing threats earlier and minimizing the window in which they can cause harm.” Robert Duncan said. Netcraft said these trends would likely continue into 2026.