Attack dwell times drop, ransomware TTPs evolve, China ramps up espionage activity

According to research by Mandiant, global median dwell time, which is calculated as the median number of days an attacker is present in a target’s environment before being detected, decreased from 24 days in 2020 to 21 days in 2021.