Why visibility at breach misses the plot

Backed by intelligence from our threat research and operations arm, Black Lotus Labs®, and our own vantage point inside a global internet backbone, Lumen has identified a major shift for 2026: modern cyberattacks are increasingly driven by exposure, with threat actors optimizing their targeting for vulnerable edge devices and services.

Inside Lumen's internet backbone

Lumen manages and operates one of the largest, most connected, and most deeply peered networks in the world.1 Black Lotus Labs provides

  • Visibility into 99% of public IPv4 addresses
  • Daily monitoring of 200B+ NetFlow sessions and DNS queries and 46,000 C2s
  • Daily tracking of 2.3M unique threats
  • 5000+ C2s disrupted in 2025
The 2026 Lumen Defender Threatscape Report

2026, All Rights Reserved | Privacy Policy