Skip to main content
Back to Home

82.8% of adversary activity occurs during an extended precursor phase, long before operational impact is realized, with an average dwell time of 185 days .

May 27, 2026

82.8% of adversary activity occurs during an extended precursor phase, long before operational impact is realized, with an average dwell time of 185 days . — This cybersecurity statistic was published by Palo Alto Networks in May 2026. It covers topics including OT Security. The original data appears in Intelligence-Driven Active Defense Report 2026 . For the full methodology and detailed findings, refer to the original report.

Source

View Original Report

Published on 2/24/2026

Share or Copy this stat

Frequently Asked Questions

What does this statistic say?

82.8% of adversary activity occurs during an extended precursor phase, long before operational impact is realized, with an average dwell time of 185 days . This data was published by Palo Alto Networks and covers OT Security.

Where does this data come from?

This statistic comes from Intelligence-Driven Active Defense Report 2026 , published by Palo Alto Networks on May 27, 2026. You can view the original report at https://www.paloaltonetworks.com/resources/whitepapers/securing-ot-environments.

What cybersecurity topics does this cover?

This statistic relates to OT Security. Browse more statistics on OT Security or from Palo Alto Networks.

Want More Statistics Like This?

Get the latest cybersecurity stats delivered to your inbox every week

Stay Ahead of Cyber Threats

Join 1,000+ security professionals getting weekly insights