KasadaIQ actively scans the external environment to maintain a deep understanding of the automated threat landscape and add context to our intelligence holdings. These updates provide a month-to-month summary of noteworthy developments. Kasada IQ intelligence analysts provide commentary on these developments to show how they are shaping the ecosystems in which bots, business, and consumers operate.
1. AI Agents Reshape Both Customer and Adversary Behavior
Adobe Analytics reported AI traffic rose 393% year-over-year in Q1 2026 as more consumers used AI assistants for online shopping, with AI traffic converting 42% more than regular customers in March 2026. This is a sharp reversal from a year earlier, when AI traffic converted 38% worse than humans. Forbes called 2026 the first full year in which shopping is embedded directly inside GenAI platforms, with discovery, evaluation, and validation happening in a single conversational exchange. Walmart's ChatGPT integration illustrates the scale: 10x more referrals from ChatGPT in January 2026 than January 2025.
In parallel, the Stanford Institute for Human-Centered AI (HAI) released its 2026 AI Index Report, finding that frontier models now match or exceed human baselines on PhD-level science, competition mathematics, and coding benchmarks. The coding benchmark (SWE-bench Verified) went from 60% to nearly 100% in a single year.
Analyst Comment:
On the consumer side, legitimate AI agents now browse longer and convert better than humans. The session characteristics that used to flag sophisticated ATO (headless signatures, programmatic navigation, atypical dwell) now describe a paying customer arriving via ChatGPT. On the adversary side, the coding benchmark acceleration translates directly to capability uplift. Adversaries no longer need deep development expertise to produce tooling that previously required it.
KasadaIQ's Q1 2026 Quarterly Threat Intelligence Report recharacterized AI as adversary infrastructure, not experimentation. Nearly every AI prediction from KasadaIQ's 2025 in review report was classified as showing early signs or starting to occur in Q1 2026. The Adobe data confirms the consumer-side of that shift. Retailers now need to distinguish three categories, not two: legitimate agentic shoppers, adversary automation and the grey zone where scraping-as-a-service operators launder requests through agent-shaped traffic.
