← Back

Wire · opportunities

IR Trends Q2 2026: Phishing and weaponized remote management tools drive attack chains

Published

28 July 2026

Topic

opportunities

Sectors

Cybersecurity

Source

Read at blog.talosintelligence.com

Verified

Fusion42 · 28 July 2026 · Fusion42 review

Phishing surged to over 50% of incident response engagements in Q2 2026, with attackers using QR codes in PDFs and weaponised remote management tools like MeshAgent and Zoho Assist to bypass MFA and establish persistent access for ransomware deployment.

This Wire brief sits within Fusion42's coverage of Cybersecurity. Wire is Fusion42's founder-focused intelligence feed: each story is connected to the funds and startups it names — every one with a live profile on Raise or Scout — so founders can follow the capital and the momentum behind the headline rather than just the headline itself. Wire analysis is one of the live surfaces Arthur reasons over.

◆ The Wire takeaway

Attackers have stopped trying to break your security and started using the tools you already trust. If you sell identity, endpoint detection, or cloud access controls, your customers are now losing to open-source remote management software and OAuth device flows - both cheap, both invisible to email gateways, both hard to detect once inside.

Related on Wire

Topics

Cybersecurityphishing-escalationrmm-exploitationmfa-bypassransomware-accessm365-compromise