Hornet-Cybersecurity-Report-2026.md

Hornetsecurity’s 2026 Cybersecurity Report reviews 2025 threat telemetry and incidents observed across Microsoft 365 ecosystems and beyond, finding a sharp rise in email-delivered malware (+131%), renewed large-scale ransomware activity, impactful supply-chain/OAuth token compromises, exploited zero-days in VPNs and SharePoint, and prolonged nation-state intrusions (F5, Juniper). The report catalogs common email TTPs (AiTM/phishing kits, obfuscated URLs, exotic TLDs, zero-font techniques), highlights identity and SaaS as primary attack surfaces, and forecasts increased risks from uncontrolled AI adoption, agentic AI weaponization, and integrity-focused “Ransomware 3.0,” while recommending phishing-resistant MFA, Zero Trust, and resiliency measures.