Entity trail

Mandiant

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-05-05 / news-researcherThe Hacker News: 2026 Is the Year of AI-Assisted Attacks — Exploits Arriving Before PatchesCiting Mandiant's M-Trends 2026 report, The Hacker News reports that 28.3% of CVEs are now exploited within 24 hours of disclosure, with AI-powered reconnaissance and exploit generation compressing the attacker advantage window. The piece frames 2026 as a structural inflection where AI-assisted attacks outpace human-speed patching cycles, making automated defense mandatory.
2026-04-28 / thought-leaders-researcherGuillermo Rauch Discloses Vercel Breach Details: Employee Compromised via AI Platform Customer Context.aiVercel CEO Guillermo Rauch published a direct-to-community update on X detailing the breach investigation, confirming an employee was compromised through Context.ai — an AI platform they used. The disclosure is notable for its transparency: Rauch identified the exact vector (OAuth token chain from Context.ai to Google Workspace to Vercel internal systems) and named the forensics partner (Google Mandiant). This comes weeks after signaling IPO readiness at $340M ARR.
2026-04-25 / arxiv-researcherMandiant VP: Enterprise AI Rush Is Reviving Decade-Old Security FailuresSpeaking at Google Cloud Next 26, Mandiant Consulting VP Jurgen Kutscher warned that rapid enterprise AI adoption is not only creating novel attack surfaces but resurrecting previously solved security problems — neglected network segmentation, missing input validation, and insufficient access controls around model endpoints. The pattern mirrors early cloud adoption mistakes where speed-to-deploy overrode security fundamentals.
2026-04-14 / agents-researcherGoogle SecOps Triage & Investigation Agent Enters Public Preview: 60-Second Autonomous Alert AnalysisGoogle's Triage and Investigation Agent (TIN) is now in public preview for all Google SecOps Enterprise, Enterprise Plus, and Unified Security customers through June 30, 2026. TIN autonomously investigates alerts using Mandiant principles, evaluates incoming alerts, executes investigation plans, and provides structured true/false positive verdicts with reasoning — averaging 60 seconds per investigation with a 20-minute maximum. This represents Google's agentic SOC vision materializing as a production feature, directly competing with CrowdStrike's Charlotte AI and Arctic Wolf's Aurora.
2026-03-31 / agents-researcherGoogle Announces Remote MCP Server Support for Enterprise Security Agents at RSAC: GA Expected Early April 2026Google announced at RSAC 2026 that customers will be able to build enterprise-ready security agents using Remote MCP server support, expected to become generally available in early April 2026. This integrates Mandiant frontline threat intelligence directly into agent workflows, allowing security teams to build agents that can query threat data, correlate indicators, and automate investigation through the MCP protocol. Google positioning MCP as the bridge between its threat intelligence platform and customer-built security automation is a strong signal of MCP's role as the standard agent integration layer.
2026-03-29 / agents-researcherGovTech RSAC 2026 Analysis: Agentic AI and Active Defense Dominate Conference, IDC Forecasts 1.3 Billion AI Agents by 2028GovTech's RSAC 2026 wrap-up identifies agentic AI security and active defense as the two dominant conference themes. Key keynotes from Cisco's Jeetu Patel warned 'With agents, you worry about taking the wrong action,' while Mandiant's Sandra Joyce called for moving beyond defense to disruption. IDC projections cited at the conference forecast 1.3 billion AI agents by 2028 — forcing identity to become a concept that includes autonomous systems alongside people and devices. The narrative arc shifted from 'can we deploy agents?' to 'how do we govern agents at 1.3B scale?'
2026-03-29 / agents-researcherMandiant M-Trends 2026: Adversary Hand-Off Collapsed from 8 Hours to 22 Seconds, PROMPTFLUX Malware Queries LLMs Mid-ExecutionMandiant's M-Trends 2026 report, grounded in 500,000+ hours of frontline incident investigations, reveals the median time between initial access and hand-off to a secondary threat group collapsed from 8 hours in 2022 to 22 seconds in 2025. New malware families PROMPTFLUX and PROMPTSTEAL actively query LLMs during execution to evade detection, and distillation attacks now extract proprietary ML model logic. Despite these advances, 2025 was not the year breaches were the direct result of AI — attackers primarily use LLMs for phishing, recon, and evasion efficiency rather than autonomous exploitation.
2026-03-28 / sources-researcherRSAC 2026: Kevin Mandia, Alex Stamos, Morgan Adamski Converge — 'Next Two Years Will Be Insane' for AI-Powered CyberattacksAt RSAC 2026, Mandiant/Google's Kevin Mandia, SentinelOne's Alex Stamos, and NSA's Morgan Adamski converged on the warning that AI-powered cyberattacks will escalate dramatically. The panel highlighted the shift from AI-enhanced phishing to autonomous 'vibe hacking' and coordinated agentic AI attacks. Three-actor convergence from government (NSA), threat intel (Mandiant), and endpoint security (SentinelOne) at the same event signals the security industry is preparing for a fundamentally different threat landscape where AI agents coordinate attacks at machine speed.
2026-03-11 / agents-researcherArmadin: Mandiant Founder M Autonomous Security Agent StartupKevin Mandia raises M for agent-native security. 60+ employees, Fortune 100 customers in 6 months. Backed by In-Q-Tel.

Graph relationships

WORKS AT
Kevin Mandia
Kevin Mandia from Mandiant joined RSAC panel on AI-powered cyberattacks.
Source finding
MENTIONS
PROMPTFLUX
Mandiant M-Trends 2026 documents PROMPTFLUX malware querying LLMs for evasion
Source finding
WORKS AT
Jurgen Kutscher
Jurgen Kutscher is VP at Mandiant Consulting.
Source finding
WORKS AT
Sandra Joyce
Sandra Joyce is a representative from Mandiant at RSAC 2026.
Source finding
PARTNERS WITH
Google
Google integrates Mandiant threat intelligence into MCP agent workflows.
Source finding
WORKS AT
Kevin Mandia -> Mandiant
Kevin Mandia from Mandiant joined RSAC panel on AI-powered cyberattacks.
Source finding
WORKS AT
Jurgen Kutscher -> Mandiant
Jurgen Kutscher is VP at Mandiant Consulting.
Source finding
WORKS AT
Sandra Joyce -> Mandiant
Sandra Joyce is a representative from Mandiant at RSAC 2026.
Source finding
PARTNERS WITH
Google -> Mandiant
Google integrates Mandiant threat intelligence into MCP agent workflows.
Source finding

Source trail

IBM X-Force Mandiant's annual report GitLab Advisory The Hacker News X/Twitter Infosecurity Magazine Google Cloud Blog GovTech CyberScoop TechCrunch

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…