Google Cloud urges resilience as breaches become inevitable
Google Cloud's latest cybersecurity report advises enterprises to shift from a prevention-only model to one that assumes breaches are inevitable. It emphasizes the importance of containing the 'blast radius' of attacks by securing backups and managing digital footprints of high-value personnel.
Why it matters
As cyber threats become more sophisticated, organizations must adopt 'resilience' strategies to maintain operations during and after successful security compromises.
Google Cloud has published a cyber security report on enterprise resilience, drawing on findings from Mandiant and the Google Threat Intelligence Group.
The report argues that many successful intrusions still begin with basic human and organisational weaknesses rather than advanced attack methods. It urges leaders to move away from a model centred mainly on prevention and towards one that assumes breaches will happen, limits damage and improves response.
Mandiant's M-Trends 2026 findings feature prominently. Exploits remained the most common initial infection vector for a sixth consecutive year at 32%, while voice phishing rose to second place at 11%.
In ransomware incidents, prior compromise was the leading confirmed vector. According to the report, that shows attackers are increasingly able to build on earlier access rather than relying only on new entry points.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in