AV, heuristics, malware, etc still use signature based detection. Including web filtering lists. We've seen legit sites like Forbes and Yahoo being used to deliver malware. It's still good to have an AV suite running as security is best implemented in a layered approach.
Sophisticated attacks like malvertising, spearphishing, water holes, drive by, ransomware, etc require new age protection systems. Then there is my favorite evasion technique called just in time malware assembly. AV suites aren't dead they just can't keep up.