recovery-denial

M-Trends 2026: The 22-Second Stat Everyone Is Misreading

John Z Black Mar 24, 2026

Security Operations & Resilience #m-trends #mandiant #ransomware #incident-response #dwell-time #initial-access-brokers #recovery-denial

Mandiant's M-Trends 2026 report is getting misquoted everywhere. The 22-second ransomware handoff is real -- but it's not what you think, and the dwell time stat buried in the report is scarier.