SpyCloud Unveils Top 10 Cybersecurity Predictions Poised to Disrupt Identity Security in 2026

According to CyberNewsWire, SpyCloud’s forecast for 2026 centres on a surge of identity-based threats, with predictions outlining evolving attacker tactics and greater risk from AI and insider threats. The report highlights a non-human identity (NHI) explosion driven by AI tools, APIs, OAuth tokens and service accounts, which often lack protections like MFA and device fingerprinting.

It notes that AI-enabled cybercrime has only just begun, with attackers expected to use it to craft better malware and more convincing phishing, while attackers will seek creative ways to bypass MFA, including residential proxies and anti-detect browsers. The piece also cites insider threats fuelled by M&A activity and employment fraud, and observes that threat actor communities are fragmenting and growing younger.

As Damon Fleury, SpyCloud’s Chief Product Officer, states, identity misuse threads through nearly every trend, emphasising the need for organisations to rethink detection, response, and prevention across their ecosystems, with the report released on 18 November 2025.