NoLimitSecu #538 - Rapport M-Trends 2026

NoLimitSecu #538 - Rapport M-Trends 2026

by NoLimitSecu

Applied Sciences & Engineering Computing & Cybersecurity UComputing and Information TechnologyURComputer security
🎙 NoLimitSecu 👥 2K 📅 April 20, 2026 ⏱ 25 min 👁 138 📄 expert opinion 🧭 2026-08-16
Available in: English (current) Français

Keywords

M-Trendscybercrimevoice phishingsupply chainAI in attacks

Summary

In this episode of NoLimitSecu, recorded at the Insyber 2026 forum in Lille, host Nicolas Ruf and contributor Hervé Schauer interview David Grout, CTO for Google Cloud Security Europe, about the M-Trends 2026 report. Grout explains that the report is based on over 500,000 hours of incident response investigations across 73 countries, covering the period from December 1, 2024 to November 30, 2025. Key trends highlighted include the rise of voice phishing (vishing), particularly by groups like Scattered Spider, the continued exploitation of edge devices (VPNs, firewalls), and the growing but still limited use of AI in attacks. Grout notes that phishing has declined significantly, now accounting for less than 6% of initial compromises, while exploitation of vulnerabilities and credential theft remain prevalent. He emphasizes the importance of retro-hunting during the patch window, as attackers often dwell deep in systems. The discussion also covers the blurring line between state-sponsored and cybercriminal actors, the lack of visibility into SMB incidents, and the relatively good maturity of large French companies. Grout advises listeners to use the report to prioritize security efforts, such as securing edge devices and preparing for AI-driven attacks. The episode concludes with a striking statistic: the time between initial access and access resale has dropped from 8 hours in 2022 to just 22 seconds in 2025.

217 words

Critical Evaluation

Value of the Information & Strength of the Argument

The video provides valuable insights from a leading cybersecurity expert, offering a high-level overview of the M-Trends 2026 report. The argumentation is solid, as Grout supports his claims with data from the report and real-world examples. He also demonstrates critical thinking by acknowledging statistical biases and limitations, such as the fact that Mandiant’s data may be skewed towards larger enterprises. The discussion is well-structured, covering a range of topics from initial attack vectors to the evolving role of AI. However, the conversational format means that some points are not explored in depth, and the lack of visual aids or detailed charts may limit the audience’s ability to fully grasp the statistics.

Scientific Rigor, Source Quality, Title Accuracy

The scientific rigor is high, as the content is based on the M-Trends 2026 report, which is a well-established industry publication. The expert’s credibility is strong, given his position at Google Cloud Security and his previous experience at Mandiant. The sources cited are limited to the report itself, but the discussion references other reports and incidents (e.g., the ANSSI panorama, the PromptFlux malware). The title accurately reflects the content, and the episode stays focused on the report. The lack of formal citations within the video is typical for a podcast format, but the reference to the report’s URL in the description provides a reliable source for further reading.

234 words

Title / Content Match

The title accurately reflects the content, as the episode focuses on the M-Trends 2026 report.

Quality & Reliability

8/10

The video features a recognized expert (David Grout, CTO for Google Cloud Security Europe) discussing the M-Trends 2026 report, which is based on extensive incident response data. The discussion is nuanced, acknowledging statistical biases and limitations. The expert provides concrete examples and practical advice. However, as a podcast interview, it lacks formal citations and the depth of a written report.

Key Moments

Markers derived by PSI from the transcript: the creator did not define chapters.

Cited Sources

Concurring Sources

  • M-Trends 2026 Report — The report itself is the primary source and is consistent with the discussion.

Contribution & Novelties

This episode offers a concise and accessible summary of the M-Trends 2026 report, highlighting key trends and providing practical recommendations for cybersecurity professionals. The expert’s insights on the declining role of phishing, the rise of voice phishing, and the evolving use of AI in attacks are particularly valuable. The discussion also emphasizes the importance of retro-hunting during the patch window, a topic often overlooked.

Pour aller plus loin :

118 words

Radar Profile

The radar profile shows high scores across all dimensions, indicating a well-rounded and reliable content. The video excels in information quantity and quality, with a strong technical level and high reliability, making it a valuable resource for cybersecurity professionals.

Reliability 8/10

💬 No comments were provided for analysis.