Skip Navigation
Get a Demo
 
Threat Detection Report

Trends

Red Canary performed an analysis of emerging and significant trends that we’ve encountered in confirmed threats, intelligence reporting, and elsewhere over the past year. We’ve compiled the most prominent trends of 2025 in this report to show major themes that may continue into 2026.

AI-powered threats

Adversaries are leveraging AI services, command-lines tools and MCP servers to automate reconnaissance, credential theft, and data exfiltration.

Threats to AI infrastructure

Adversaries target AI infrastructure through model manipulation and agent hijacking, exploiting the deep interconnectivity of AI tools to steal data and execute unauthorized commands.

Ransomware

Ransomware continues to surge year-over-year, and payout demands are only getting higher.

Identity attacks

Identity-based threats now account for more than half of our total confirmed threats, following an 850 percent increase in identity threat detections year-over-year.

Vulnerabilities

In 2025, Red Canary tracked vulnerabilities in software including SAP NetWeaver, Microsoft Windows Server Update Services, and SharePoint.

Stealers

Driven in part by malware-as-a-service stealers like LummaC2 and Rhadamanthys, stealer activity surged in 2025, targeting both Windows and Mac systems and often using paste-and-run lures.

Mac malware

Entrenched within enterprises, macOS systems now face similar threats to Windows systems.

Browser threats

Compromised and malicious browser extensions are expanding the attack surface and increasing data exposure risks for organizations.

Supply chain compromises

No organization is immune to supply chain compromises, but several incidents in 2025 gave insight into how to minimize your risk.

Remote monitoring and management (RMM) tools

In 2025, Red Canary observed RMM tools as the ultimate payload in an increasing number of campaigns, including web-based phishing.

Where Next

TOP 10
Threats

We’ve analyzed the most prevalent threats occurring in our customer environments.

TOP 10
Techniques

We’ve analyzed the most prevalent techniques occurring in our customer environments.

 
 
 
 
Back to Top