Intezer-AI-SOC-Report-2026.md

Intezer AI SOC's 2026 report presents forensic analysis of 25M alerts from 2025, revealing that meaningful threats (notably stealers, RATs, Mirai, and multiple ransomware families including Akira and LockBit) are frequently missed when triage focuses only on high-severity alerts. The report covers endpoint, network, cloud, phishing, and identity telemetry, documents abuse of trusted hosting (code sandboxes) for phishing, details exploited CVEs and delivery techniques (multi-stage loaders, PNG-embedded payloads), and includes an appendix attributing the CrazyHunter ransomware activity to an identified operator.