Proofpoint takes AI security beyond the inbox to block attacks in progress

Proofpoint has expanded its AI-led security platform with intent-based detection across email, collaboration tools and browsers, targeting attacks that evade conventional warnings and continue after users click.

Proofpoint has broadened its artificial intelligence-led security offer with a set of tools aimed at spotting and stopping attacks before they reach users, as cybercriminals increasingly exploit legitimate-looking communications and browser activity. In an announcement reported by Fintech News Middle East, the American cybersecurity company said the new approach is designed to examine the intent behind an interaction, rather than relying solely on obvious warning signs that attackers now know how to evade.

At the centre of the system is what Proofpoint calls an agentic collaboration security layer, built to analyse email, collaboration platforms and browser behaviour in context. The company says this is underpinned by a Knowledge Graph that combines threat intelligence on active campaigns, attack patterns and compromised suppliers with internal signals such as business relationships, access rights and user risk. Proofpoint also points to its Nexus intent-based detection model, which is intended to judge what a message or interaction is trying to achieve and whether that goal makes sense in the surrounding business context. The company says the two elements share intelligence so that detection, investigation and user protection can inform one another across the platform.

Proofpoint is also extending its controls into the browser through Advanced Browser Protection, developed with Push Security. According to the company, this is intended to address post-click phishing, malicious URLs, rogue browser extensions, OAuth-based phishing, credential theft and session hijacking, all of which are increasingly used after an initial lure has been delivered by email or collaboration tool. The move reflects a wider shift in enterprise defence, in which security teams are being pushed to monitor activity across the full path of an attack, not just at the inbox or gateway.

The launch comes against a backdrop of rising concern over AI-enabled deception and more persistent forms of cyber espionage. A 2026 survey cited by Absolute Security found that 55% of 750 enterprise CISOs in the US and the UK said an incident in the previous year had left mobile, remote or hybrid endpoint devices inoperable. In the Middle East, Turkey and Africa, Kaspersky’s Global Research and Analysis Team said at Cyber Security Weekend META in August 2026 that spyware detections rose 20%, password stealer attacks 30% and backdoor findings 10% over the previous year, while mobile spyware targeting grew 65%. INTERPOL’s African Cyberthreat Assessment Report 2026 also said AI was involved in 55% of reported cybercrime across Africa, with losses linked to AI-facilitated scams and automated social engineering more than doubling to US$484 million from US$192 million in 2024.

Proofpoint’s wider product strategy suggests the company is positioning AI not only as a threat vector, but also as the control plane for enterprise defence. Its broader security platform is pitched around human-, agent- and data-centric protection across email, cloud and collaboration tools, and the company says it is trusted by more than 14,000 large enterprises and over 80% of the Fortune 100. The latest additions indicate a continued push towards intent-based controls that can govern both human users and AI-driven agents as enterprise environments become more automated and more exposed.

Disclaimer: This content is intended for informational purposes only. Readers are advised to exercise their own judgement, conduct due diligence, or consult a qualified expert before acting on any information provided.