Listen to this Post
A Surging Interest with Alarming Consequences
Artificial Intelligence is no longer a niche technology—it’s the engine powering the next digital revolution. And if recent data is any indication, people are rushing to AI-powered platforms at a record pace. But alongside the boom in adoption, a parallel trend is unfolding—an equally dramatic surge in security vulnerabilities. The latest report by Menlo Security reveals a staggering 50% increase in web traffic to AI-related websites within just 11 months. This meteoric rise underscores both the growing dependence on browser-based GenAI tools and the urgent need for stronger digital defenses.
AI Usage is Soaring, But Security Struggles to Keep Up
According to new research by Menlo Security, traffic to AI-related websites skyrocketed from 7 billion in February 2024 to an eye-popping 10.53 billion by January 2025. This unprecedented growth signals a massive shift in how people are engaging with generative AI. Despite the emergence of desktop apps and enterprise-level AI systems, roughly 80% of GenAI usage is still browser-based. The reason is simple: browsers offer cross-platform compatibility, instant accessibility, and rapid scalability for AI tools.
Menlo’s recent 30-day study, which monitored AI engagement across hundreds of organizations globally, uncovered some key patterns. GenAI sites logged 5.6 million visits in just one month. Over 6,500 unique GenAI domains were identified, dwarfing the 3,000 dedicated applications in use. ChatGPT alone has 400 million weekly users—95% of whom rely on the free tier. Adoption is especially strong in the Asia-Pacific region, where 75% of companies are actively leveraging GenAI capabilities.
But with increased usage comes increased risk. Cybercriminals are weaponizing GenAI to launch hyper-realistic phishing campaigns. Zero-hour phishing attacks, for instance, have spiked by 130% year-over-year, largely driven by AI automation. Shadow AI—where employees use personal accounts for AI tasks outside of IT control—has added to the threat landscape. A staggering 68% of employees reportedly use free-tier GenAI tools via personal logins, and 57% have fed sensitive information into these unsecured platforms.
Security experts are sounding the alarm. Nicole Carignan of Darktrace emphasized that a deep understanding of evolving adversarial tactics is crucial to defending AI systems. Meanwhile, Krishna Vishnubhotla from Zimperium stressed that legacy cybersecurity approaches are no longer adequate against AI-fueled threats. As GenAI adoption scales, so must the measures to protect users, data, and infrastructure from the very tools meant to empower them.
What Undercode Say:
Browser-Based GenAI: A Double-Edged Sword
The dominance of browser-based GenAI tools brings both convenience and chaos. Browsers simplify AI access for users and developers alike, but their open nature makes them fertile ground for phishing, data leakage, and shadow IT practices. This model encourages rapid innovation, but without strong guardrails, it also introduces systemic vulnerabilities that scale just as quickly as the tools themselves.
Shadow AI: The Invisible Threat
Shadow AI is emerging as one of the biggest concerns in corporate cybersecurity. Employees unknowingly expose organizations to risk by using free AI tools outside approved ecosystems. The statistics from Menlo Security are damning: nearly 70% of users engage with GenAI without IT oversight, and over half transmit sensitive information. Without monitoring and policy enforcement, organizations are essentially blind to these actions.
Free Tools, Expensive Consequences
The popularity of the free-tier GenAI tools like ChatGPT is undeniable, but it creates a false sense of safety. Free access democratizes AI but also introduces massive attack surfaces. These platforms often lack enterprise-grade protections, and when used outside secure channels, they become gateways for data breaches, intellectual property theft, and even regulatory violations.
The Rise of AI-Powered Phishing
Phishing is evolving faster than security teams can respond. With GenAI, attackers can generate tailored, convincing emails that mimic legitimate communication with chilling precision. The 130% increase in zero-hour phishing attacks reflects a new reality—traditional email filters and endpoint protection tools can’t keep up. Security strategies must now incorporate AI-based detection and real-time behavioral analysis to mitigate these fast-adapting threats.
Global GenAI Adoption and Regional Hotspots
The Asia-Pacific region is leading the charge in GenAI adoption, with 75% of organizations actively engaging with the technology. This surge is partly driven by strong government support and a booming startup ecosystem. However, the speed of adoption is outpacing regulatory frameworks, leaving gaps in compliance and enforcement. Other regions may soon follow this trajectory, making global coordination essential.
Corporate Cybersecurity in an AI-Driven World
Security frameworks need to evolve. Many companies still rely on traditional tools ill-equipped to deal with AI-driven risks. Security should now be baked into AI lifecycle processes—from development and deployment to monitoring and retirement. Without this proactive approach, businesses risk falling victim to the very tools they’ve invested in.
Developer Responsibility and Ethics
Developers must also take greater responsibility. Launching tools quickly is no longer good enough—there must be a balance between speed and security. Ensuring ethical design, data privacy, and safe default settings are critical to protecting end users and corporate systems alike.
Behavioral Security Models: The Future
One promising defense strategy is behavioral analytics. Instead of relying on fixed rules, these models learn how users normally behave and flag deviations in real time. AI will fight AI, creating a continuous loop of detection and adaptation. This isn’t just the future of cybersecurity—it’s the only viable path forward.
🔍 Fact Checker Results:
✅ Web traffic to AI platforms rose 50% from Feb 2024 to Jan 2025
✅ 80% of GenAI use still happens via browsers
❌ Security measures are not scaling fast enough to match AI adoption
📊 Prediction:
The browser will remain the dominant platform for GenAI access through 2026 due to its ubiquity and speed. However, unless enterprise-level security frameworks evolve rapidly, we’re likely to see a surge in AI-powered breaches, especially via shadow AI and phishing vectors. Expect regulatory bodies to intervene with stricter compliance mandates and AI usage audits by mid-2026. ⚠️🧠💻
🕵️📝✔️Let’s dive deep and fact‑check.
References:
Reported By: www.infosecurity-magazine.com
Extra Source Hub:
https://www.pinterest.com
Wikipedia
OpenAi & Undercode AI
Image Source:
Unsplash
Undercode AI DI v2
🔐JOIN OUR CYBER WORLD [ CVE News • HackMonitor • UndercodeNews ]
📢 Follow UndercodeNews & Stay Tuned:
𝕏 formerly Twitter 🐦 | @ Threads | 🔗 Linkedin | 🦋BlueSky | 🐘Mastodon
