PaloAlto-Global-Incident-Response-Report-2026.md

Unit 42’s Global Incident Response Report 2026 summarizes findings from 750+ IR engagements in 2025, highlighting four key trends — AI as a force multiplier for attackers, identity as the primary attack surface, expanding software supply chain and SaaS integration risks, and nation-state adaptation — and provides prevalence metrics (e.g., identity-related causes in ~90% of cases, rapid exfiltration timelines), extensive MITRE technique mappings, and actionable recommendations for reducing exposure, adopting Zero Trust, strengthening IAM, securing the software/AI lifecycle, and automating SOC response.