ReliaQuest

Holmdel, N.J. – September 30, 2026 -- Index Engines' CyberSense Research Lab found that 47.8% of 1,064 ransomware strains detonated in the first half of 2026 relied on directory-entry destruction, more than double the 18.3% that used full encryption, marking a shift away from techniques that trigger standard security scans.

Attackers now suppress the telltale signs security tools rely on

The lab documented new ransomware built to preserve file extensions and timestamps, maintain low entropy, and encrypt only selected sections of files slowly enough to avoid detection thresholds. One variant, Encoder, destroyed file content while leaving names, sizes, timestamps, and entropy readings unchanged, according to Jim McGann, CMO of Index Engines. A surface scan would report that data as clean, McGann said, while CyberSense identified the corruption by analyzing file content and structure directly.

Delray Beach, Fla. – – September 29, 2026 -- The global threat intelligence market is projected to grow from $13.15 billion in 2026 to $26.68 billion by 2031, a 15.2% compound annual growth rate, according to MarketsandMarkets. The market stood at $11.55 billion in 2025, reflecting accelerating enterprise and government spending on AI-driven detection and proactive risk management amid rising cyberattack volumes.