← Back

Wire · operational-macro

IR Trends Q2 2026: Phishing and weaponized remote management tools drive attack chains

Published

28 July 2026

Topic

operational-macro

Sectors

Cybersecurity

Source

Read at blog.talosintelligence.com

Verified

Fusion42 · 28 July 2026 · Fusion42 review

Phishing surged to over 50% of incident response engagements in Q2 2026, with attackers using QR codes in PDFs and weaponised remote management tools like MeshAgent and Zoho Assist to bypass MFA and establish persistent access for ransomware deployment.

This Wire brief sits within Fusion42's coverage of Cybersecurity.

◆ The Wire takeaway

Attackers have stopped trying to break your security and started using the tools you already trust. If you sell identity, endpoint detection, or cloud access controls, your customers are now losing to open-source remote management software and OAuth device flows - both cheap, both invisible to email gateways, both hard to detect once inside.

Coverage

1 source · 28 Jul 2026

Related on Wire

Topics

Cybersecurityphishing-escalationrmm-exploitationmfa-bypassransomware-accessm365-compromise