Explore the latest trends, techniques, and procedures (TTPs) our incident response experts are actively facing with the TTP Briefing, a report built on frontline threat intelligence from our global digital forensics and incident response (DFIR) investigations during Q3 2026.
This edition also incorporates threat intelligence from LevelBlue’s recently integrated teams, including SpiderLabs, which broadens the dataset behind our findings.
Key findings from Q3 2026:
- Threat actors are increasingly using compromised identities to get in
- Threat actors are exfiltrating data and extorting victims, rather than encrypting systems
- Legitimate tools are helping attackers exfiltrate data undetected
- Top targeted industry sectors and company sizes
- Average dwell time from initial intrusion until the IR team is engaged
Download the report for actionable recommendations and strategic insights to strengthen cyber resilience and prepare for evolving cyber risks.
