A new SOC trendline points to renewed pressure on network-layer targets, and the real warning is that endpoint-only visibility can leave security teams reading the wrong signals.