Explore the latest trends, techniques, and procedures (TTPs) our incident response experts are actively facing with the TTP Briefing, a report built on frontline threat intelligence from our global digital forensics and incident response (DFIR) investigations during Q2 2026.
This edition also incorporates threat intelligence from LevelBlue’s recently integrated teams, including SpiderLabs, which broadens the dataset behind our findings.
Key findings from Q2 2026:
- Threat actors are increasingly abusing token and machine identities, which have led to a rise in software supply chain attacks
- Threat actors are moving faster, decreasing their time within victim networks
- ClickFix-style social engineering attacks are helping attackers bypass traditional security controls
- Top targeted industry sectors and company sizes
- Most commonly observed CVEs
Download the report for actionable recommendations and strategic insights to strengthen cyber resilience, enhance detection and response capabilities, and prepare for evolving cyber risks in 2026.
