Elastic Security Labs analyzes hundreds of millions of telemetry events, exposing adversary trends and defender insights. With an emphasis on transforming data into action, this report reveals the power of unified and open protections, with deeper dives on:

• Adversary preferences for open source and off-the-shelf tools
• Intelligence profiles describing some of our most notorious threats
• The powerful role ML and AI play in developing advanced detection capabilities

The Global Threat Report looks at both sides of the equation: the relentlessness of security development and threat actors’ commitment to surpass it. Grab your copy of the fourth edition today, and get ready for what comes tomorrow.

Highlights

• There was explosive growth in infostealers (now exceeding 25% of malware detected) feeding credentials to robust access broker networks — low risk no longer!
• Execution surpassed Defense Evasion as the top MITRE ATT&CK® tactic for the first time since we began reporting, representing a third of all observed activity.
• New baselines provided from open and closed sources enable comparisons to collected telemetry data, a new commitment to transparency.
• Our research deep dives describe how AI will impact security teams this coming year.