GoKawiilHuntress ranks RMM abuse, mailbox manipulation and AiTM as top SMB cyber threats
Cybersecurity firm Huntress published its 'Tragic Quadrant,' a ranked list of attack tactics most frequently hitting small and mid-sized businesses. The data shows remote monitoring and management (RMM) tool abuse accounted for 45% of endpoint incidents in Q1 2026, mailbox manipulation made up 24.6% of identity threat signals so far in 2026, and adversary-in-the-middle attacks that bypass multi-factor authentication represented 18.9% of identity-based threats tracked in 2025.