The Top 4 Threats We Found by Investigating Every Alert for a Quarter

Prophet Security's Q2 2026 quarterly threat report finds that 7% of investigated alerts were confirmed malicious and that identity compromises accounted for roughly half of malicious activity, driven mainly by stolen authenticated sessions that bypass conditional access and MFA; other key findings include browser-delivered infostealers that exfiltrate session cookies, highly targeted phishing against financial roles, and long intrusions on devices lacking endpoint monitoring, with several techniques persisting through password resets and conventional remediation.