2026 Unit 42 Global Incident Response Report

Frontline insights defining the next era of cyber risk.

Explore the findings

Read the blog

INTRODUCING

Managed XSIAM 2.0

24/7 managed SOC built for tomorrow’s threats.

See what's new

Read the blog

Palo Alto Networks
named a Leader in
Worldwide IR Services.

See why in the 2025 IDC MarketScape for
Worldwide Incident Response Services.

Get the details

Read the blog

Prepared for attacks.
Positioned for the future.

We know who they are. You’ll know what to do.
For cybersecurity expertise, turn to Unit 42^®.

Get empowered

To take down an attack,
team up with experts.

For years, Unit 42 has been teaming up with security teams to take down cyber attacks from every angle. This means our incident response experts are available 24/7 to help you not only stop an attack, but prevent the next one too. As experts in the Palo Alto Networks tools you've already invested in, our threat-informed incident response approach is like no other, enabling us to contain and eradicate threats in record time.

Learn more Under attack?

WHY UNIT 42

Intelligence driven. Response ready.

As the threat landscape changes and attack surfaces expand, security strategies must evolve. Our world-renowned incident response team and security consulting experts will guide you before, during and after an incident with an intelligence-driven approach.

Connect with us

Assess
Transform
Respond

Assess your security controls

Proactively assess and test your controls against real-world threats targeting your organization, then communicate your security risk posture to your board and key stakeholders.

Learn more

SERVICES:

Transform your security strategy

Improve your business resilience with a threat-informed approach to breach preparedness and tighter alignment across your people, processes, technology and governance.

Learn more

SERVICES:

Respond in record time

Deploy Unit 42^® incident response experts to quickly investigate, eradicate and remediate even the most advanced attacks, working in partnership with your cyber insurance carrier and legal teams.

Learn more

SERVICES:

Transform your cybersecurity
with Unit 42

WHAT SETS US APART

World-renowned security experts, always in your corner

As threats escalate, we act as your cybersecurity partner to advise and strengthen your security strategies. Our team of incident responders, security consultants and threat researchers help you prepare for and respond to the most challenging threats.

Learn more

200+

THREAT RESEARCHERS

Our team is made up of threat analysts, threat hunters, and experts in reverse engineering, malware analysis, and threat modeling. Together, they inform our incident response and cyber risk management services to keep you ahead of the changing threat landscape.

1k+

INCIDENT RESPONSE ENGAGEMENTS A YEAR

With their experience, expertise and unique tooling, our Incident Response and Digital Forensics Services can help your team respond in record time.

30M

MALWARE SAMPLES PER DAY ANALYZED

Our 10+ years of historical malware analysis – growing by over 30 million samples per day – help us stay ahead of adversaries and better protect you.

Explore our threat research

Unit 42’s threat research puts threats into context, helping security teams determine how best to defend against future attacks and enhancing the threat protection capabilities of Palo Alto Networks products and services.

View all blogs

Hear from our customers

Discover how Unit 42 security consultants and incident responders are helping our customers before, during and after an incident.

View all customer stories

Winning on defense: Securing the Green Bay Packers through an AI-driven platform approach

See how Unit 42 and Cortex XSIAM deliver unified protection

Glacier Bancorp hardens security without breaking the bank

See how platformization delivers cost reduction and resiliency

Staying ahead of the game with Palo Alto Networks

See the National Hockey League case study

Leveling up security maturity with Unit 42 incident response expertise

See the Asante Health Systems case study

Unit 42 secures medical device manufacturer after network breach

See how our IR team sprang into action

Government eradicates ransomware threat and reinstates critical services

See how our Unit 42 experts took action

LATEST EVENTS & WEBINARS

Browse all

Related resources

See all resources

CUSTOMER STORIES

Nine customer success stories in action.

Read the e-book

Webpage

Unit 42 Retainer

Read now

Research

Unit 42 Threat Research Center

Access all articles

Go from reactive to proactive

Our consultants serve as your trusted advisors to assess and test your security controls, transform your security strategy with an intelligence-informed approach, and respond to incidents in record time.

Sign me up to receive news, product updates, sales outreach, event information and special offers about Palo Alto Networks and its partners.

By submitting this form, I understand my personal data will be processed in accordance with Palo Alto Networks Privacy Statement and Terms of Use.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

2026 Unit 42 Global Incident Response Report

Frontline insights defining the next era of cyber risk.

Managed XSIAM 2.0

24/7 managed SOC built for tomorrow’s threats.

Palo Alto Networks named a Leader in Worldwide IR Services.

See why in the 2025 IDC MarketScape for Worldwide Incident Response Services.

Prepared for attacks. Positioned for the future.

We know who they are. You’ll know what to do. For cybersecurity expertise, turn to Unit 42®.

To take down an attack, team up with experts.

Intelligence driven. Response ready.

As the threat landscape changes and attack surfaces expand, security strategies must evolve. Our world-renowned incident response team and security consulting experts will guide you before, during and after an incident with an intelligence-driven approach.

Assess your security controls

SERVICES:

Transform your security strategy

SERVICES:

Respond in record time

SERVICES:

Transform your cybersecurity with Unit 42

World-renowned security experts, always in your corner

THREAT RESEARCHERS

INCIDENT RESPONSE ENGAGEMENTS A YEAR

MALWARE SAMPLES PER DAY ANALYZED

Explore our threat research

Unit 42’s threat research puts threats into context, helping security teams determine how best to defend against future attacks and enhancing the threat protection capabilities of Palo Alto Networks products and services.

Hear from our customers

Discover how Unit 42 security consultants and incident responders are helping our customers before, during and after an incident.

Winning on defense: Securing the Green Bay Packers through an AI-driven platform approach

Glacier Bancorp hardens security without breaking the bank

Staying ahead of the game with Palo Alto Networks

Leveling up security maturity with Unit 42 incident response expertise

Unit 42 secures medical device manufacturer after network breach

Government eradicates ransomware threat and reinstates critical services

The Practitioner's Breakdown of the 2026 Unit 42 Global IR Report

The Briefing Behind the 2026 Unit 42 Global IR Report

The State of Cybersecurity Incident Response

Navigate the threat of AI-powered cyberattacks: Critical takeaways from the 2024 Unit 42 Threat Frontier Report.

The Ransomware Landscape: Threats Driving the SEC Rule and Other Regulations

Related resources

Nine customer success stories in action.

Unit 42 Retainer

Unit 42 Threat Research Center

Go from reactive to proactive

THANK YOU!

Get the latest news, invites to events, and threat alerts

Products and Services

Company

Popular Links

Palo Alto Networks
named a Leader in
Worldwide IR Services.

See why in the 2025 IDC MarketScape for
Worldwide Incident Response Services.

Prepared for attacks.
Positioned for the future.

We know who they are. You’ll know what to do.
For cybersecurity expertise, turn to Unit 42^®.

To take down an attack,
team up with experts.

Transform your cybersecurity
with Unit 42