Symantec<\/span><\/a> and Carbon Black Threat Hunter team are tracking in 2026.<\/p>\n5 Trends redefining everyone\u2019s security risk<\/h3>\n1. People are the key to unlocking a company\u2019s secrets<\/h4>\n
A trend we have seen in multiple attacks this year is attackers gaining access to victim networks not by leveraging zero-day vulnerabilities or using sophisticated software supply chain attacks, but rather by taking advantage of organizations\u2019 biggest weakness\u2014the people who work there.<\/p>\n
The breach of the Salesforce instances of multiple companies and organizations worldwide by an attack group called Shiny Hunters in mid-2025 was a prime example of this. The wave of attacks impacted numerous well known companies. These attacks were conducted by the Shiny Hunters extortion group, which targeted Salesforce customers with vishing (voice phishing) attacks to compromise credentials or to trick employees into authorizing a malicious OAuth app in order to gain access to companies\u2019 Salesforce portals\u2014no malware or fancy tactics needed. The attackers would then steal data and attempt to extract a ransom from the affected company. These attacks echo similar attacks we saw being carried out by the Scattered Spider attack group, which is also known to primarily gain access to victim networks by carrying out sophisticated social engineering attacks. They compromised numerous casinos in Las Vegas in 2023, while in 2025, they deployed the DragonForce ransomware onto the networks of multiple well-known UK retailers.<\/p>\n
The success of these groups using tactics like this mean it is highly likely we will see further attacks of a similar nature in 2026. Artificial intelligence\u2014which can be used to spoof voices and make scam emails appear more authentic\u2014also presents attackers with the opportunity to make social engineering attacks appear even more believable, and makes them an even greater danger for organizations.<\/p>\n
2. Russia and Iran may make cyber reply to real-world pressures<\/h4>\n
Ongoing geopolitical pressures on Russia and Iran could provoke threat actors in those countries to initiate disruptive or aggravating cyberattacks on their adversaries, such as Ukraine, Israel, the E.U. and the U.S. If they are unable to establish military dominance over their rivals then they may use cyberspace to make a point. Attackers from these countries may in some cases lack the skills and resources to perpetrate truly destructive attacks against their foes, but distributed-denial-of-service (DDoS) attacks, the spreading of disinformation, and other disruptive activity could be deployed against entities cyber attackers in those countries perceive to be acting in opposition to the country\u2019s regime.<\/p>\n
Recently, drone incursions in EU airspace have caused issues for multiple airports, with drones that were operating in Polish airspace shot down, while other European airports, including in Copenhagen, were also disrupted by drone activity in their airspace. The finger of blame for these incidents has been pointed at Russia, though it has denied any involvement in the activity.<\/p>\n
A ransomware attack against Collins Aerospace also severely disrupted operations at multiple European airports in September 2025. The ransomware impacted the Muse software used by Collins Aerospace, which is described as a \u201cnext-generation common-use passenger processing system solution that allows multiple airlines to share check-in desks and boarding gate positions at an airport rather than having their own dedicated infrastructure.\u201d The incident meant that multiple airlines were impacted and only manual check-in was available for intending passengers, which caused major delays. While this incident isn\u2019t believed to be linked to nation state activity, it does underline the kind of chaos nation state actors could potentially cause with a similar attack of such a nature.<\/p>\n
With the global geopolitical situation likely to remain unstable for some time to come, disruption and aggravation may be the name of the game for cyber attackers in 2026.<\/p>\n
3. Agentic AI will change the threat landscape (but not in the way you think)<\/h4>\n
There is absolutely no doubt that Agentic AI will become a potent tool in the hands of attackers and this could happen as early as 2026.<\/p>\n
When people think of AI in the hands of malicious actors, it naturally raises fears of it being used to create novel threats with unprecedented levels of sophistication. What is far more likely is that Agentic AI will affect the quantity of attacks more than the quality. In short, it has the potential to radically lower the barrier to entry for attackers.<\/p>\n
Currently, a successful attack requires an investment of time and a minimum level technical expertise. Agentic AI could obliterate these prerequisites. Where attackers previously needed to be able to write or acquire code, identify infection vectors, build out attack toolkits, stand up infrastructure and, in many cases, layer in some level of phishing or social engineering, autonomous agents could potentially handle these complexities, with minimal interaction or instruction from the attacker.<\/p>\n
The outcome could be a significant uptick in automated attacks launched by opportunists with limited skills.<\/p>\n
4. Breaking the unbreakable: The looming quantum computing challenge<\/h4>\n
Quantum computing is coming and, while it will be a transformational technology, it also poses a serious challenge to today\u2019s security infrastructure. Simply put, quantum computers pose an existential risk to the current encryption standards that protect everything from financial transactions to secure communications.<\/p>\n
Current encryption methods rely on mathematical problems that are computationally impossible for the current generation computers to solve. However, quantum computers could break these systems within minutes.<\/p>\n
Adversaries are already implementing “harvest now, decrypt later” (HNDL) attacks, systematically collecting encrypted data with the intention of decrypting it once quantum computing becomes viable. This strategy is a clear threat, as attackers don’t need current decryption capabilities\u2014they simply store encrypted communications, financial records, and sensitive data until quantum computers can break the encryption.<\/p>\n
This process of transitioning to post-quantum encryption is not without its challenges. Decades of work have gone into refining and protecting the implementation of existing encryption methods, and we now face the task of revising and rewriting code using new, post-quantum standards. This will inevitably introduce a new generation of bugs, but we will have the benefit of AI to mitigate them.<\/p>\n
5. Gathering clouds on the horizon<\/h4>\n
There are some signs that 2026 could be the year a critical mass of attackers turn their attention to attacks against enterprise cloud environments.<\/p>\n
To date, attacks against the cloud have amounted to a small subset of malicious activity. While most cloud services are undoubtedly robust, two other factors limited the number of attacks: Malicious actors were still profiting handsomely from attacks on conventional networks and there was no depth of knowledge on how cloud services could be breached.<\/p>\n
There is evidence that a growing number of attackers are now deepening their understanding of cloud platforms and beginning to identify viable attack strategies. It is only a matter of time before that knowledge spreads.<\/p>\n
Identity and Access Management (IAM) exploitation is already bearing fruit. Attackers are now combing code repositories to find forgotten access keys. Using these, they can create new IAM users and attach elevated policies, establishing persistent access to cloud environments.<\/p>\n
Infrastructure-as-Code (IaC) has made it easier for organizations to quickly and automatically spin up new infrastructure as needed. However, attackers are already beginning to probe for weaknesses such as hardcoded secrets in IaC templates or misconfigurations that lead to publicly exposed resources.<\/p>\n
As attackers broaden their knowledge of the cloud attack surface, organizations need to keep pace, identifying potential vulnerabilities and implementing zero-trust architectures.<\/p>\n
The best strategy won\u2019t just fall into your lap<\/h4>\n
If 2025 taught us anything, it\u2019s that complexity breeds opportunity for attackers and defenders alike. But protected under tried, trusted, and true layers of security, our machines (and people) can become a source of strength and lasting resilience.<\/p>\n
Source: Five Cyber Predictions for 2026<\/a><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"As lines blur between human error and machine intelligence, defense has never been more personal What if we told you the biggest known vulnerability of 2026 isn\u2019t your tech, but your trust? Welcome to the next era of cyber risk in all its genre-bending, chaotic glory. People remain the easiest way in for malicious attackers, […]<\/p>\n","protected":false},"author":7163,"featured_media":20418,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[142],"tags":[],"class_list":["post-20537","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-articles"],"acf":[],"yoast_head":"\n
Five Cyber Predictions for 2026 \u261d Oberig IT blog<\/title>\n<meta name=\"description\" content=\"Five Cyber Predictions for 2026 \u26a1 Oberig IT blog for integrator partners, vendors and end customers\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/oberig-it.com\/en\/articles\/five-cyber-predictions-for-2026\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Five Cyber Predictions for 2026 \u261d Oberig IT blog\" \/>\n<meta property=\"og:description\" content=\"Five Cyber Predictions for 2026 \u26a1 Oberig IT blog for integrator partners, vendors and end customers\" \/>\n<meta property=\"og:url\" content=\"https:\/\/oberig-it.com\/en\/articles\/five-cyber-predictions-for-2026\/\" \/>\n<meta property=\"og:site_name\" content=\"Oberig IT\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/Oberig.disti\" \/>\n<meta property=\"article:published_time\" content=\"2025-12-04T14:38:45+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-01-06T14:42:12+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/oberig-it.com\/wp-content\/uploads\/2025\/12\/dajdzhest-gruden2025-1.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1800\" \/>\n\t<meta property=\"og:image:height\" content=\"600\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Iryna Vlasenko\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Iryna Vlasenko\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"9 minutes\" \/>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Five Cyber Predictions for 2026 \u261d Oberig IT blog","description":"Five Cyber Predictions for 2026 \u26a1 Oberig IT blog for integrator partners, vendors and end customers","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/oberig-it.com\/en\/articles\/five-cyber-predictions-for-2026\/","og_locale":"en_US","og_type":"article","og_title":"Five Cyber Predictions for 2026 \u261d Oberig IT blog","og_description":"Five Cyber Predictions for 2026 \u26a1 Oberig IT blog for integrator partners, vendors and end customers","og_url":"https:\/\/oberig-it.com\/en\/articles\/five-cyber-predictions-for-2026\/","og_site_name":"Oberig IT","article_publisher":"https:\/\/www.facebook.com\/Oberig.disti","article_published_time":"2025-12-04T14:38:45+00:00","article_modified_time":"2026-01-06T14:42:12+00:00","og_image":[{"width":1800,"height":600,"url":"https:\/\/oberig-it.com\/wp-content\/uploads\/2025\/12\/dajdzhest-gruden2025-1.jpg","type":"image\/jpeg"}],"author":"Iryna Vlasenko","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Iryna Vlasenko","Est. reading time":"9 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/oberig-it.com\/en\/articles\/five-cyber-predictions-for-2026\/#article","isPartOf":{"@id":"https:\/\/oberig-it.com\/en\/articles\/five-cyber-predictions-for-2026\/"},"author":{"name":"Iryna Vlasenko","@id":"https:\/\/oberig-it.com\/en\/#\/schema\/person\/fd0fd95a6b9813571f62adee41332887"},"headline":"Five Cyber Predictions for 2026","datePublished":"2025-12-04T14:38:45+00:00","dateModified":"2026-01-06T14:42:12+00:00","mainEntityOfPage":{"@id":"https:\/\/oberig-it.com\/en\/articles\/five-cyber-predictions-for-2026\/"},"wordCount":1431,"commentCount":0,"publisher":{"@id":"https:\/\/oberig-it.com\/en\/#organization"},"image":{"@id":"https:\/\/oberig-it.com\/en\/articles\/five-cyber-predictions-for-2026\/#primaryimage"},"thumbnailUrl":"https:\/\/oberig-it.com\/wp-content\/uploads\/2025\/12\/dajdzhest-gruden2025-1.jpg","articleSection":["Articles"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/oberig-it.com\/en\/articles\/five-cyber-predictions-for-2026\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/oberig-it.com\/en\/articles\/five-cyber-predictions-for-2026\/","url":"https:\/\/oberig-it.com\/en\/articles\/five-cyber-predictions-for-2026\/","name":"Five Cyber Predictions for 2026 \u261d Oberig IT blog","isPartOf":{"@id":"https:\/\/oberig-it.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/oberig-it.com\/en\/articles\/five-cyber-predictions-for-2026\/#primaryimage"},"image":{"@id":"https:\/\/oberig-it.com\/en\/articles\/five-cyber-predictions-for-2026\/#primaryimage"},"thumbnailUrl":"https:\/\/oberig-it.com\/wp-content\/uploads\/2025\/12\/dajdzhest-gruden2025-1.jpg","datePublished":"2025-12-04T14:38:45+00:00","dateModified":"2026-01-06T14:42:12+00:00","description":"Five Cyber Predictions for 2026 \u26a1 Oberig IT blog for integrator partners, vendors and end customers","breadcrumb":{"@id":"https:\/\/oberig-it.com\/en\/articles\/five-cyber-predictions-for-2026\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/oberig-it.com\/en\/articles\/five-cyber-predictions-for-2026\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/oberig-it.com\/en\/articles\/five-cyber-predictions-for-2026\/#primaryimage","url":"https:\/\/oberig-it.com\/wp-content\/uploads\/2025\/12\/dajdzhest-gruden2025-1.jpg","contentUrl":"https:\/\/oberig-it.com\/wp-content\/uploads\/2025\/12\/dajdzhest-gruden2025-1.jpg","width":1800,"height":600},{"@type":"BreadcrumbList","@id":"https:\/\/oberig-it.com\/en\/articles\/five-cyber-predictions-for-2026\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/oberig-it.com\/en\/"},{"@type":"ListItem","position":2,"name":"Five Cyber Predictions for 2026"}]},{"@type":"WebSite","@id":"https:\/\/oberig-it.com\/en\/#website","url":"https:\/\/oberig-it.com\/en\/","name":"Oberig IT","description":"Distribution of complex IT and information security solutions","publisher":{"@id":"https:\/\/oberig-it.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/oberig-it.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/oberig-it.com\/en\/#organization","name":"Oberig IT","url":"https:\/\/oberig-it.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/oberig-it.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/oberig-it.com\/wp-content\/uploads\/2023\/06\/logo-new.svg","contentUrl":"https:\/\/oberig-it.com\/wp-content\/uploads\/2023\/06\/logo-new.svg","caption":"Oberig IT"},"image":{"@id":"https:\/\/oberig-it.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/Oberig.disti"]},{"@type":"Person","@id":"https:\/\/oberig-it.com\/en\/#\/schema\/person\/fd0fd95a6b9813571f62adee41332887","name":"Iryna Vlasenko","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/oberig-it.com\/en\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/1994031a0cacb6e8d8f7847ecb9b980006657a175510f6d475283dc893f8ebc9?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/1994031a0cacb6e8d8f7847ecb9b980006657a175510f6d475283dc893f8ebc9?s=96&d=mm&r=g","caption":"Iryna Vlasenko"}}]}},"_links":{"self":[{"href":"https:\/\/oberig-it.com\/en\/wp-json\/wp\/v2\/posts\/20537","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oberig-it.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/oberig-it.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/oberig-it.com\/en\/wp-json\/wp\/v2\/users\/7163"}],"replies":[{"embeddable":true,"href":"https:\/\/oberig-it.com\/en\/wp-json\/wp\/v2\/comments?post=20537"}],"version-history":[{"count":3,"href":"https:\/\/oberig-it.com\/en\/wp-json\/wp\/v2\/posts\/20537\/revisions"}],"predecessor-version":[{"id":20540,"href":"https:\/\/oberig-it.com\/en\/wp-json\/wp\/v2\/posts\/20537\/revisions\/20540"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oberig-it.com\/en\/wp-json\/wp\/v2\/media\/20418"}],"wp:attachment":[{"href":"https:\/\/oberig-it.com\/en\/wp-json\/wp\/v2\/media?parent=20537"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/oberig-it.com\/en\/wp-json\/wp\/v2\/categories?post=20537"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/oberig-it.com\/en\/wp-json\/wp\/v2\/tags?post=20537"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}