Why Trust is the New Attack Surface: Mid-Year Threat Update 2026

From the source: Darktrace Blog

Darktrace’s analysis of the first half of 2026 shows attackers increasingly exploiting trust rather than bypassing security controls. For defenders, context and behavioral analysis remain essential foundations of security.

Read the full story on Darktrace Blog
Originally published by Darktrace Blog on 25 Aug 2026. Techarda links to the original rather than republishing it. Read the full article →

Have you worked with this?

The story is what was announced. Nobody has discussed it yet, so if it touches your team, a short post about what you’ve seen helps the next reader.

Start the discussion

More from Darktrace

Recent updates from Darktrace, so you can tell whether this is a one-off or part of a pattern.

All Darktrace news →
Security

Darktrace / SECURE AI: Behavioral Security for the AI enterprise

Discover how Darktrace / SECURE AI applies behavioral security to AI usage, prompts, agents, and development to help organizations adopt AI securely.

Darktrace·via Darktrace Blog
Security

Agent Hijacks: How Conversation History Poisoning Can Turn AI Agents Into Attackers

Darktrace researchers demonstrate how conversation history poisoning can hijack agentic harnesses, convincing AI agents to perform offensive cyber operations with little to no human interaction.

Darktrace·via Darktrace Blog
Security

Detecting Rogue AI Agents: When Enterprise Agents Turn to Hacking

Darktrace researchers found that AI agents tasked with solving impossible challenges frequently resorted to hacking techniques. Learn how Darktrace detects and disrupts rogue agent behavior in real time.

Darktrace·via Darktrace Blog

More in Security

What other companies in Security are doing. The category page shows who’s active, side by side.

Compare companies in Security →
SecurityWhy it matters

Threat Actors Use Google Ads To Target Ledger Users

In August 2026, Zscaler ThreatLabz analyzed a phishing campaign that used fraudulent Google ads to target Ledger hardware wallet users. The ads redirected users through Google Cloud Storage and Vercel to a Google Sites page containing a phishing page impersonating Ledger in an iframe. During our analysis, the Vercel redirect appeared to change every 15-20 minutes. There, a fake…

Zscaler·via Zscaler ThreatLabz
Security

Metasploit Wrap Up: Belgian Waffles, Chocolates, and…Modules-Frites?

Rapid7·via Rapid7 Blog
Security

Two Things Every Cyber Asset Attack Surface Management (CAASM) Tool Needs to Get Right

Cyber Asset Attack Surface Management (CAASM) solved a significant problem. Security teams can now say with confidence what they own. But, two things separate a CAASM tool that stops there from one that actually moves the needle on risk. The first is what the inventory itself carries. The second is what it connects to. 1. An inventory needs to do more than list what exists A list of assets is…

Check Point Software·via Check Point Software Blog
Security

Agents can now set up your website’s security with Turnstile Spin

Misconfiguring Turnstile by skipping backend validation leaves sites exposed to bots. Turnstile Spin fixes incomplete setups by using your preferred AI coding agent to wire up server-side verification.

Cloudflare·via Cloudflare Blog