Google’s M-Trends 2025 report is out - data from Mandiant’s incident response engagements. Direct PDF link to avoid the sales pitch wall:

https://services.google.com/fh/files/misc/m-trends-2025-en.pdf

Thread about my main observations:

- Firstly, no mention of generative AI or GenAI again. This is in common with Sophos incident response, ESET, etc etc etc. You’ll see why as we get into the data.

Career tip:

If you work for a company that allows you to write up a blog post about a "UAC bypass" that REQUIRES ADMIN CREDENTIALS, and this same company follows through with publishing it...

Consider finding a new employer that respects you.