The average time for attackers to move laterally within a breached network has accelerated to just 29 minutes, a 65% increase in speed from the previous year. This rapid "breakout" is fueled by the misuse of legitimate credentials, which allows attackers to blend in, and by targeting unmanaged devices that lack security controls. A significant majority (82%) of detected intrusions in 2025 were malware-free, relying on authorized pathways. These factors have drastically reduced the time defenders have to detect and respond to cyber intrusions.