Google Cloud Security Threat Horizons Report #13 (H1 2026) Is Out!

**Executive summary:** An unofficial blog post summarizes Google Cloud's Threat Horizons Report #13 (H1 2026), noting a shift from credential-based access to software exploitation (RCE) as the primary initial access vector, identity compromise underpinning 83% of compromises, high-volume data theft as the dominant attacker goal (73% of cloud incidents), dramatically shortened windows between disclosure and mass exploitation, and use of large language models to automate credential harvesting and lateral escalation.