2026 Unit 42 Global Incident Response Report

# Executive Summary Unit 42's 2026 Global Incident Response Report synthesizes findings from 750+ 2025 incident responses, highlighting four dominant trends—AI as a force multiplier for attackers, identity-driven intrusions as the primary attack surface, expanded software supply-chain misuse through trusted integrations, and nation-state shifts toward deeper infrastructure/virtualization compromises—and provides case studies, MITRE technique mappings, regional/industry breakdowns, and prioritized countermeasures for SOCs, IAM, supply-chain security, and zero trust.