Comcast Business identified phishing and drive-by compromise as the two highest-volume techniques observed, accounting for 25.4 billion and 21.9 billion events, respectively.
Artificial intelligence is accelerating cyberattacks and increasing pressure on identity security, according to Comcast Business’ 2026 Cybersecurity Threat Report.
The fourth annual report analyzed 79.3 billion cybersecurity events detected across the company’s cybersecurity customers from March 1, 2025, through Feb. 28, 2026. Phishing accounted for 25.4 billion events, followed by drive-by compromise at 21.9 billion.
According to the release, AI coding tools enable attackers to develop exploits before patches become available, while familiar attack techniques remain prevalent.
“Attackers have stopped needing to break in,” said Noopur Davis, chief information security and product privacy officer at Comcast Corporation.
The release identifies stolen credentials, hijacked sessions and expanding non-human identities as challenges requiring ongoing behavioral analysis alongside identity management.
It also describes attackers compromising routers, cameras, streaming devices and point-of-sale terminals, then using them in residential proxy networks to disguise traffic. Comcast Threat Research Lab researchers identified groups of infected devices forwarding traffic for outsiders.
The report uses expanded telemetry and an updated methodology. Comcast cautioned that its totals cannot be compared with previous reports.
The full 2026 Comcast Business Cybersecurity Threat Report can be downloaded here.