According to Mandiant's latest threat data, the median time between an initial access event and the hand-off to a secondary threat group dropped from more than 8 hours in 2022 to only 22 seconds in 2025.

Check out my latest CSO report for more insights on how attacker dwell time rose, voice phishing topped email phishing, and threat actors increasingly targeted backup and identity systems.

Faster attacks and ‘recovery denial’ ransomware reshape threat landscape
https://www.csoonline.com/article/4148705/faster-attacks-and-recovery-denial-ransomware-reshape-threat-landscape.html