Every March we publish the Threat Detection Report, our annual analysis of prevalent threats and techniques we’ve observed in confirmed threat detections and trends we’ve observed in those detections and beyond. Now, for the first time, we’ve supplemented the Threat Detection Report with a lightweight, midyear update examining the same data from the first six months of the current year. You can think of it as an addendum to the current Threat Detection Report or a preview of the upcoming one. In either case, you’ll find analysis of pressing threats and techniques—and an in-depth look at how identity attacks are affecting the infosec community.

This report includes:

• an overview of identity trends that are shaping the threat landscape and driving change in the infosec industry
• an assessment of changes in threat and technique prevalence from the previous year into the first six months of this one
• analysis of emergent or otherwise interesting threats and techniques
• actionable guidance on preventive, mitigatory, or other security controls that teams can employ to better protect their organization against prevalent threats and techniques

A detailed explanation of the data we leveraged to produce this and the full Threat Detection Report is in the report’s methodologies section. Put briefly, the report is the product of our analysis of confirmed threat detections across our customers, including the techniques adversaries abuse, the threats they leverage, and other insight gleaned from detections or observed across the industry.