1H 2026 Threat Intelligence Report

1H 2026 findings reveal growing abuse of trusted identities, AI-assisted tooling, SaaS platforms, and business workflows as attackers achieve greater impact…

20 min read

Read the reportOpens in a new tab

At a glance

~30%

of monitored organizations experienced at least one Microsoft Teams IT-support impersonation attempt

6,188

delivery domains tied to just 158 payload hosts

Recommended next.

All resources
Beyond the Perimeter: What Security Teams Are Missing

Blog

Beyond the Perimeter: What Security Teams Are Missing

Exposed credentials from a 3rd party breach and brand impersonation are two ways threat actors are exploiting organizations.

5 min read

Read

Beyond the Perimeter: What Security Teams Are Missing

Blog

Beyond the Perimeter: What Security Teams Are Missing

Exposed credentials from a 3rd party breach and brand impersonation are two ways threat actors are exploiting organizations.

5 min read

Read

Beyond the Perimeter: What Security Teams Are Missing

Blog

Beyond the Perimeter: What Security Teams Are Missing

Exposed credentials from a 3rd party breach and brand impersonation are two ways threat actors are exploiting organizations.

5 min read

Read

Ontinue Offers new Dark Web Monitoring service for ION MXDR Customers

Webinar

Ontinue Offers new Dark Web Monitoring service for ION MXDR Customers

Exposed credentials and lookalike domains surface long before an attacker moves. See how ION for Dark Web Monitoring brings those findings into your MXDR…

23 min watch

Watch

Ontinue Offers new Dark Web Monitoring service for ION MXDR Customers

Webinar

Ontinue Offers new Dark Web Monitoring service for ION MXDR Customers

Exposed credentials and lookalike domains surface long before an attacker moves. See how ION for Dark Web Monitoring brings those findings into your MXDR…

23 min watch

Watch

Ontinue Offers new Dark Web Monitoring service for ION MXDR Customers

Webinar

Ontinue Offers new Dark Web Monitoring service for ION MXDR Customers

Exposed credentials and lookalike domains surface long before an attacker moves. See how ION for Dark Web Monitoring brings those findings into your MXDR…

23 min watch

Watch

Lunex Unmasked: A New Information Stealer Deployed Through BYOVD

Blog

Lunex Unmasked: A New Information Stealer Deployed Through BYOVD

Ontinue researchers uncover the Lunex malware platform, revealing a sophisticated attack chain, BYOVD techniques, and previously unreported capabilities.

19 min read

Read

Lunex Unmasked: A New Information Stealer Deployed Through BYOVD

Blog

Lunex Unmasked: A New Information Stealer Deployed Through BYOVD

Ontinue researchers uncover the Lunex malware platform, revealing a sophisticated attack chain, BYOVD techniques, and previously unreported capabilities.

19 min read

Read

Lunex Unmasked: A New Information Stealer Deployed Through BYOVD

Blog

Lunex Unmasked: A New Information Stealer Deployed Through BYOVD

Ontinue researchers uncover the Lunex malware platform, revealing a sophisticated attack chain, BYOVD techniques, and previously unreported capabilities.

19 min read

Read

This is Nonstop SecOps.

Ontinue

European HQ

Grubenstrasse 54
8045 Zürich

North America HQ

450 Maple Street
Redwood City, CA 94063

UK Office

9 Holborn
London, EC1N 2LL

APAC Office

World Trade Tower, Sector 16
Noida, Uttar Pradesh 201301

Düsseldorf Office

Speditionstraße 2
40221 Düsseldorf, Germany

Vienna Office

Kohlmarkt 8-10
1010 Wien, Austria

Toronto Office

6060-3080 Yonge St
Toronto, ON M4N 3N1

Ontinue

© 2026 Ontinue. All rights reserved.

Ontinue offers nonstop SecOps through an AI-powered managed extended detection and response (MXDR) service. Ontinue ION MXDR combines powerful proprietary AI with the industry’s first collaboration with Microsoft Teams to continuously build a deep understanding of our customers’ environments, informing how we prevent, detect, and respond to threats.

Continuous protection. AI-powered Nonstop SecOps. That’s Ontinue.

This is Nonstop SecOps.

Ontinue

European HQ

Grubenstrasse 54
8045 Zürich

North America HQ

450 Maple Street
Redwood City, CA 94063

UK Office

9 Holborn
London, EC1N 2LL

APAC Office

World Trade Tower, Sector 16
Noida, Uttar Pradesh 201301

Düsseldorf Office

Speditionstraße 2
40221 Düsseldorf, Germany

Vienna Office

Kohlmarkt 8-10
1010 Wien, Austria

Toronto Office

6060-3080 Yonge St
Toronto, ON M4N 3N1

Ontinue

© 2026 Ontinue. All rights reserved.

Ontinue offers nonstop SecOps through an AI-powered managed extended detection and response (MXDR) service. Ontinue ION MXDR combines powerful proprietary AI with the industry’s first collaboration with Microsoft Teams to continuously build a deep understanding of our customers’ environments, informing how we prevent, detect, and respond to threats.

Continuous protection. AI-powered Nonstop SecOps. That’s Ontinue.

This is Nonstop SecOps.

Ontinue

European HQ

Grubenstrasse 54
8045 Zürich

North America HQ

450 Maple Street
Redwood City, CA 94063

UK Office

9 Holborn
London, EC1N 2LL

APAC Office

World Trade Tower, Sector 16
Noida, Uttar Pradesh 201301

Düsseldorf Office

Speditionstraße 2
40221 Düsseldorf, Germany

Vienna Office

Kohlmarkt 8-10
1010 Wien, Austria

Toronto Office

6060-3080 Yonge St
Toronto, ON M4N 3N1

Ontinue

© 2026 Ontinue. All rights reserved.

Ontinue offers nonstop SecOps through an AI-powered managed extended detection and response (MXDR) service. Ontinue ION MXDR combines powerful proprietary AI with the industry’s first collaboration with Microsoft Teams to continuously build a deep understanding of our customers’ environments, informing how we prevent, detect, and respond to threats.

Continuous protection. AI-powered Nonstop SecOps. That’s Ontinue.

This is Nonstop SecOps.

Ontinue

European HQ

Grubenstrasse 54
8045 Zürich

North America HQ

450 Maple Street
Redwood City, CA 94063

UK Office

9 Holborn
London, EC1N 2LL

APAC Office

World Trade Tower, Sector 16
Noida, Uttar Pradesh 201301

Düsseldorf Office

Speditionstraße 2
40221 Düsseldorf, Germany

Vienna Office

Kohlmarkt 8-10
1010 Wien, Austria

Toronto Office

6060-3080 Yonge St
Toronto, ON M4N 3N1

Ontinue

© 2026 Ontinue. All rights reserved.

Ontinue offers nonstop SecOps through an AI-powered managed extended detection and response (MXDR) service. Ontinue ION MXDR combines powerful proprietary AI with the industry’s first collaboration with Microsoft Teams to continuously build a deep understanding of our customers’ environments, informing how we prevent, detect, and respond to threats.

Continuous protection. AI-powered Nonstop SecOps. That’s Ontinue.