Explore the latest trends, techniques, and procedures (TTPs) our incident response experts are actively facing with the TTP Briefing Q1 2026.
As LevelBlue continues integrating capabilities across Cybereason, Stroz Friedberg, Trustwave, and Alert Logic, our threat intelligence is expanding to incorporate insights from SpiderLabs and trillions of security events. For the first time, this edition reflects data from the broader LevelBlue incident response and threat intelligence ecosystem.
Key findings from Q1 2026:
- Top targeted industry sectors and company sizes
- New social engineering tactics that are growing in sophistication
- Business email compromise incidents resulting in data exfiltration
- How threat actors are abusing AI tools to move laterally in a network
- Average dwell time from initial intrusion until IR team is engaged
Download the report for actionable recommendations and strategic insights to strengthen cyber resilience, enhance detection and response capabilities, and prepare for evolving cyber risks in 2026.
