M-Trends 2026: Attackers' 22-Second Hand-Offs Are Crushing Defenders' Response Times
Attackers aren't waiting anymore—they're handing off network access in 22 seconds. Mandiant's latest M-Trends report, based on 500,000 hours of investigations, shows why your defenses are falling behind.
theAIcatchupApr 08, 20263 min read
⚡ Key Takeaways
Attack hand-off window collapsed to 22 seconds, pre-staging malware for instant ransomware.𝕏
Voice phishing (vishing) jumps to 11% of intrusions, evading email defenses via SaaS token theft.𝕏
Ransomware targets backups and identity for true recovery denial; dwell time hits 14-day median.𝕏
The 60-Second TL;DR
Attack hand-off window collapsed to 22 seconds, pre-staging malware for instant ransomware.
Voice phishing (vishing) jumps to 11% of intrusions, evading email defenses via SaaS token theft.
Ransomware targets backups and identity for true recovery denial; dwell time hits 14-day median.