Attackers are accelerating their assault timelines, with a notable shift towards collaborative tactics and targeting systems crucial for breach recovery. According to Mandiant's M-Trends 2026 report1, which analyzed over 500,000 hours of incident response engagements in 2025, the median dwell time increased to 14 days, up from 11 days the previous year, despite key phases of the attack lifecycle being compressed. This change in strategy is coupled with a rise in voice phishing, which accounted for 11% of incidents. The report, released at the RSA Conference, highlights the evolving threat landscape, where attackers are adapting and refining their methods to maximize impact. This trend matters to security practitioners because it signals a need for enhanced vigilance and proactive measures to protect critical systems and mitigate the risk of recovery denial ransomware, ultimately requiring a reassessment of incident response strategies.
Faster attacks and ‘recovery denial’ ransomware reshape threat landscape
⚡ High Priority
Why This Matters
A breach involving Mandiant signals evolving attack methods — watch for downstream regulatory and supply-chain effects.
References
- Mandiant. (2026, March 23). Faster attacks and ‘recovery denial’ ransomware reshape threat landscape. CSO Online. https://www.csoonline.com/article/4148705/faster-attacks-and-recovery-denial-ransomware-reshape-threat-landscape.html
Original Source
CSO Online
Read original →