RedCanary-Threat-Detection-Report-2026.md

Red Canary’s 2026 Threat Detection Report reviews >110,000 confirmed threats observed across endpoints, identities, cloud, and SaaS in 2025, highlighting major trends: an explosion in identity/cloud account compromises, growing use of AI by adversaries and attacks targeting AI infrastructure, widespread use of paste-and-run social engineering, proliferation of stealers (LummaC2, Rhadamanthys, Atomic, etc.), increased abuse of RMM tools, malicious browser extensions and supply-chain compromises (npm Shai‑Hulud, Salesloft Drift), and notable vulnerabilities—providing detection guidance, atomic tests, and mitigation recommendations for defenders.