SecurityThe Threat Actor Is a Fiction: Why Attribution's Core Unit Is Breaking
M-Trends 2026 shows the median time between initial access and downstream handoff dropped to 22 seconds. That number is not primarily a detection challenge. It is an epistemological one. The 'threat actor' as an analytical unit is becoming structurally incoherent, and attribution methodology has not caught up.