Turn the latest threat intelligence into action
This free threat intelligence report is written for CISOs and security leaders. Produced in partnership with Orpheus, a leading threat intelligence firm, it covers Q4 2025–Q1 2026 with a forward view into Q2 2026. We combine threat intelligence analysis with real-world red team insight to show how threats are evolving, how they are likely to materialize, and where to focus defense. The result is practical adversary models you can exercise in your own environment.
What the report covers
The report translates observed activity into testable scenarios built from regulated testing and our exercises. You’ll find:
- Adversary models mapped to likely attack chains for Q2 2026
- Technique and TTP analysis across cybercrime, APT, and hacktivist activity
- Sector-level overviews to support prioritization
- A vulnerability landscape review to help decide what to test first
From threat intelligence to validation
The report bridges the gap between observed signals and intelligence you can validate in real environments. Use it to build red team and purple team exercises around likely techniques, validate resilience against realistic attack chains, and prioritize testing based on technique prevalence and sector exposure.
Download the report
Key trends and findings
Cybercrime threats remained high across sectors.
APTs refined proven tradecraft.
Hacktivism disrupted public-facing services.
Outlook for Q2 2026
Ransomware activity stays elevated.
APTs prioritize scalable exploitation.
Hacktivist disruption stays persistent but low-impact.
Testable scenarios in this report
Compromise of core infrastructure in financial services
North Korean IT worker access in an engineering team
