Tidal Cyber Releases 2025 Threat-Led Defense Report Based on Real Adversary Behavior

Tidal Cyber has released its first annual Threat-Led Defense Report, announced in a press release. The report is described as the only industry analysis built entirely on real adversary behavior, drawing from tens of thousands of technique and procedure observations collected through the Tidal Cyber platform and its Procedures Library.

The report uses NARC, Tidal Cyber’s AI engine that processes unstructured threat intelligence, to extract detailed procedure-level data. It identifies the most frequently used attack techniques across ransomware, espionage, and financially motivated campaigns, as well as behavioral shifts among groups such as Medusa, Qilin, and Interlock.

Unlike traditional cyber threat intelligence reports, the Threat-Led Defense Report directly maps adversary behaviors to defensive controls using frameworks such as MITRE ATT&CK, ATLAS, and D3FEND. This mapping highlights where defenses are strong or lacking and helps organizations prioritize improvements.

Tidal Cyber stated that the report offers a behavioral-first view of risk by focusing on how attackers actually operate within victim environments. The report is available now on the company’s website.