Excerpt below, courtesy of Cybersecurity Insiders. For the complete story, visit the link.
Corey Thuen, CEO & Co-Founder of Gravwell | July 15, 2026
The cybersecurity metric that should concern us most is not necessarily the number of vulnerabilities published this week, the latest malware family, or whichever threat actor just got a flashy new name. It’s the amount of time attackers are able to remain in an environment undetected before someone finds them and kicks them out, otherwise known as attacker dwell time.
The reality is that, for many organizations, attackers spend far too much time in their environment once they’ve been compromised - an average of 241 days according to the latest reporting. This gives them ample time to perform reconnaissance, move laterally, disrupt systems, steal data, and stage additional attacks.