Global NewsHigh Priority (9/10)

Google M-Trends 2026: Initial Access Handoff Shrinks to 22 Seconds

The time between an attacker's initial access and handoff to a secondary group has collapsed from hours to just 22 seconds, according to Google's M-Trends 2026 report.

Key Points

  • Initial access handoff time collapsed from hours to 22 seconds.
  • Exploits accounted for 32% of initial infections, the most common vector.
  • Report based on 500,000+ hours of Mandiant investigations in 2025.

Full Details

Google's M-Trends 2026 report, based on over 500,000 hours of Mandiant incident response investigations in 2025, reveals a dramatic acceleration in attacker workflows. The time between an attacker gaining initial access to an organization's systems and handing off to a secondary threat group has plummeted from hours to a mere 22 seconds. Exploits were the most common initial infection vector, accounting for 32% of cases, followed by phishing (11%), prior compromise (10%), and stolen credentials (9%). This rapid handoff underscores the increasing sophistication and coordination of modern cybercriminal operations.

Why It Matters

The extreme speed of handoffs means organizations have drastically less time to detect and respond to breaches, necessitating near-real-time automated defense mechanisms.

Sourcesecurityweek.com

Get stories like this delivered daily

AI-curated news, personalized to your interests. Zero noise.

Start 7-Day Free Trial →

More in Global News