BlueVoyant's Threat Fusion Cell analyzed vetted OSINT for the second quarter of 2026, tracking about 285 active threat groups, over 760 malware strains, and more than 300 campaigns. Social engineering remained the dominant initial access vector, while supply chain attacks continued their upward trajectory and held the number-two spot above vulnerability exploitation for a second straight quarter.

Download now to learn:

• How initial access methods shifted in 2Q2026, with supply chain attacks cementing their position above vulnerability exploitation
• Where attackers are concentrating by geography and sector, including Germany's entry into the top five targeted countries and finance's continued but narrowing lead
• Nearly 2,100 ransomware and extortion victims tracked this quarter, a 9% drop from 1Q, with Agenda holding the top spot for a third consecutive quarter

Use these findings to validate defenses against the quarter's most active tactics, brief stakeholders on geographic and sector targeting shifts, and prioritize controls where attackers are actually gaining access.