Most state and local agencies still run security operations built for business hours, while attackers move at machine speed around the clock.

The 2026 Public Sector Threat Landscape report, drawn from Mandiant M-Trends data and produced with Google Public Sector, breaks down where those gaps are widening and what closes them.

• Why voice phishing now targets help desks as email phishing declines

• How one compromised service account can trigger a SaaS domino effect across connected systems

• Why mean time to exploit has fallen to under seven days, often ahead of available patches

• What 122 day median dwell times reveal about espionage groups hiding inside agency networks

• Five moves for machine speed defense, from secret rotation to sender constrained tokens

Download the report to see how agencies are countering AI powered attackers before the next SaaS compromise.