MITRE ATT&CK

2026

INTEL-34: Doctrine at Machine Speed
INTEL-32: When the Sellers Agree
INTEL-31: Access Is a Product
INTEL-30: The Pre-Disclosure Window
INTEL-28: The Ransom Bluff
INTEL-27: You Are the Bullseye
INTEL-26: The Convenient Insider
INTEL-25: The Third-Party Half
INTEL-24: Breadth, Not Depth
INTEL-23: The Permission Problem
INTEL-22: The Pre-Disclosure Gap
E90 - Refinement, Not Revolution
E89 - The April Inflection
INTEL-19: Synthetic Insiders in the Hiring Pipeline
INTEL-18: ClickFix: When the User Becomes the Exploit
INTEL-17: The Ecosystem Is Eating Itself
E88 - The Trust Audit
INTEL-16: The Credential Chain
INTEL-15: The Delegation Threshold
INTEL-14: Shadow Agents
E87 - The Agents Have Keys
INTEL-13: Every Wall Has a Door
INTEL-12: The Defender’s Window
INTEL-11: 850% Identity Surge
INTEL-10: The Ransomware Swarm
E86 - Castles on Quicksand
INTEL-9: 22 Seconds
INTEL-8: The Breach Starts With a Phone Call
INTEL-7: A New Risk Has Entered the Top 5
INTEL-6: The Malware That Does Math to Prove You’re Human
E85 - The Responder’s Report
E84 - The Digital Parasite
E83 - The Convergence
INTEL-5: Your Microsoft Login Page Is the Phishing Page
E82 - Blending In
INTEL-4: Your Cloud APIs Are the Attack Infrastructure
E81 - 72 Minutes
E79 - Same AI, Different Mission
INTEL-3: 91,000 Sessions — Threat Actors Are Mapping Your AI Infrastructure
E78 - Three Flags, One Target
INTEL-2: The Human-in-the-Loop Imperative for AI Security
E76 - Ransomware’s Profit Problem (And Why That Makes It Worse)
INTEL-1: Law Firms Are Now Premium Ransomware Targets
E75 - When Attackers Move Faster Than You Can Think
E74 - Welcome to 2026

2025

E57 - 93,000 Threats Across 4 Million Endpoints
Best of E52 - 450,000 Hours on the Front Lines
Best of E51 - 12,000 Breaches and the Year Everything Doubled
Best of E45 - 51 Seconds to Breakout
Best of E39 - 900 Million Attacks and the List That Missed 73%

2024

Best of E32 - 19 Vendors Tested. Most Missed Over Half the Attack.