2026-ThreatDetectionReport_RedCanary.pdf

Red Canary’s 2026 Threat Detection Report reviews detection telemetry and investigations from 2025 across 4.5M endpoints and cloud/identity assets, highlighting emergent trends (AI-powered threats, attacks on AI infrastructure, identity compromise surges, ransomware evolution toward data-extortion, stealers, browser/extension abuse, npm supply-chain worms, and RMM tool misuse), describing top threats (e.g., JustAskJacky, Tampered Chef, KongTuke, LummaC2, Rhadamanthys), and providing MITRE-mapped techniques, active exploit examples, IoCs, and prioritized detection/mitigation guidance for defenders.