Top Threats of 2026

Change Your Timezone

Location:
Online

By 2026, cybersecurity risk is driven less by what organizations fail to patch and more by what they trust by default. AI is embedded into daily operations, SaaS platforms are deeply integrated, and identity persists long after authentication. Attackers are adapting by exploiting legitimate access paths and normal business behavior rather than relying on novel exploits. The trends that define 2026 highlight where mature security programs are under the most pressure:

AI visibility, control, and usage become primary risk drivers as sensitive data flows through AI tools, embedded platform features, personal accounts, and shadow integrations.
AI-accelerated ransomware and operational extortion reduce attacker effort while increasing leverage through rapid data analysis, targeted pressure, and efficient monetization.
Identity and trust exploitation inside legitimate workflows emerge as the dominant access pattern, blending social engineering, session abuse, and real-time manipulation into expected activity.
Supply chain and embedded trust failures expand through SaaS integrations, plugins, and downstream dependencies that extend risk beyond organizational boundaries.

These trends describe the operating environment security leaders will be managing in 2026 and where existing controls are most likely to fall out of alignment.

Speakers

Sherri Davidoff
Founder
LMG Security

Sherri Davidoff is the Founder of LMG Security and the author of three books, including “Ransomware and Cyber Extortion” and “Data Breaches: Crisis and Opportunity.” As a recognized expert in cybersecurity, she has been called a “security badass” by the New York Times. Sherri is a regular instructor at the renowned Black Hat trainings and a faculty member at the Pacific Coast Banking School. She is also the co-author of Network Forensics: Tracking Hackers Through Cyberspace (Prentice Hall, 2012), and has been featured as the protagonist in the book, Breaking and Entering: The Extraordinary Story of a Hacker Called “Alien.” Sherri is a GIAC-certified forensic examiner (GCFA) and penetration tester (GPEN) and received her degree in Computer Science and Electrical Engineering from MIT.

Picture of LMG Security's Director of Training & Research Matt Durrin

Matt Durrin
Director of Training
LMG Security

Matt Durrin is the Director of Training at LMG Security. He is an instructor at the international Black Hat USA conference, where he has taught classes on ransomware and data breaches. Matt has conducted cybersecurity seminars, tabletop exercises, and classes for thousands of attendees in all sectors, including banking, retail, healthcare, government, and more. He is also the co-author of a book, Ransomware and Cyber Extortion: Response and Prevention. A seasoned cybersecurity and IT professional, Matt specializes in ransomware response and research, as well as the deployment of proactive cybersecurity solutions. Matt holds a bachelor’s degree in computer science from the University of Montana, and his malware research has been featured on NBC Nightly News.