Threat research
Prepare for what's next
Understand threat actor's most recent targets and attack behaviors with the 2024 Elastic Global Threat Report — designed to provide your cybersecurity team with crucial insights for the upcoming year.
Major insights for 2025
Prepare your security team with exclusive insights from the Global Threat Report.
Adversaries are utilizing off-the-shelf security tools to abuse
Researchers found that offensive security tools (OSTs) like Cobalt Strike and Metasploit made up ~54% of observed alerts.
50% of checks failed to meet CIS benchmarks
The new section on cloud security posture management (CSPM) revealed that enterprises are misconfiguring cloud environments, allowing threat actors to thrive.
Attackers are leaning into legitimate credentials to infiltrate
Defense Evasion techniques fell 6% year over year, and Credential Access rose in both endpoint and the cloud.
Frequently asked questions
The Elastic Global Threat Report is a report from Elastic Security Labs that explores a full year of telemetry. The Global Threat Report provides a comprehensive look at several threat topics, including malware, cloud, endpoint, and adversaries campaigns. It also provides cybersecurity forecasts for the upcoming year.
The telemetry analyzed for the Global Threat Report is Elastic's private data as well as public and volunteer sets. All data has been responsibly sanitized to protect the identities of everyone involved.
The 2024 Elastic Global Threat Report has analyzed data from June 2023 to July 2024.
All previous iterations of the Global Threat Report can be found on the Report section of Elastic Security Labs site.
Explore Elastic Security
Empower your SOC
Resist advancing threats with AI-driven security analytics, the future of SIEM.
Work smarter with AI
Detect sooner, investigate faster, and respond before threats have a chance with the Elastic Search AI Platform.
Fueled by Elastic Security Labs
Apply novel research on threats, malware, and protections from our expert security researchers.