2026's Shifting Threat Landscape: What Alert Data Reveals

This session walked through Critical Start's H1 2026 Threat Landscape Report, covering January 1 through June 30, 2026. The report draws on first-party telemetry from the tools Critical Start supports, SOC investigation data, analyst enrichments, open-source intelligence, and Critical Start's dark web monitoring services. The Cyber Research Unit uses this data to run trend analysis on alerts investigated by the Security Operations Center, enrich findings with OSINT, and compare patterns over time to inform both internal detection strategy and external threat awareness.

New in this edition of the report:

• A dedicated vulnerability threat landscape section
• Insights from executive leadership and subject matter experts across the SOC, vulnerability management service, customer success, and sales teams
• Expanded coverage of SOC AI and how it's supporting analyst investigations

‍

Watch the full report: Threat Intel Report

‍