You've seen the analyst grids that rank vendors into four boxes to show who's leading and disrupting a market. We made one of our own, this time ranking the threats those tools are built to stop. Welcome to the Huntress Tragic Quadrant, our decidedly less magical look at the attack techniques causing the most trouble right now.
Pulling from data across the 285,000 businesses we protect, we worked with our own security experts to map the specific tactics attackers are running right now: ClickFix, device code phishing, AI prompt injection, and more. Plotted by how often we see them and how much damage they cause, it's a clear read on exactly where to focus your defenses first.
On October 8, Huntress CEO and founder Kyle Hanslovan and Principal Product Researcher Chris Ryan—along with special guests—put the quadrant to the test live, spinning up the real techniques that landed on it and showing just how fast modern tradecraft goes from idea to execution.
Reading about the latest attacker tactics is one thing. Watching someone build them in front of you is another.
Related Resources
Modern cybercrime groups run like standard enterprises. Watch real attack demos with John Hammond and Jim Browning to learn how attackers operate and outsmart them.
How are cyber attacks on schools and universities changing in 2026? See the threat patterns, real examples, and resilience strategies in the Huntress education report.
Which cyber tactics are wrecking businesses? The Huntress Tragic Quadrant ranks today’s top attacker techniques by impact and shows how to stop them.
Phishing has come a long way from the days of bad grammar and glaring typos. Today’s threat actors are masters of deception, using tactics like impersonating trusted brands, faking email reply chains, sneaking in malicious QR codes, and more.
This report, based on research from 521 security and IT professionals, examines why endpoint and identity security keeps breaking down, and why the answer isn't to add more self-managed point solutions.
Learn how today’s AI-powered adversary weaponizes phishing and social engineering with real incidents Huntress has investigated. Get the download.
Ransomware stops business. Huntress keeps yours moving.
Attackers abuse legitimate MDM platforms to deploy rogue RMM tools, turning device management into a pathway for remote access and persistence.
In the Ransomware Threat Report, you’ll learn why ransomware is your biggest competitor right now, 24/7/365.
[Summary text goes here]
