New Verizon Report Reveals the Security Gap Attackers Are Exploiting Most

Vulnerability exploitation became the leading initial access vector, surpassing credential abuse. Artificial intelligence is accelerating cybercrime through GenAI-enabled phishing, reconnaissance, and malware development. Human involvement accounts for 62% of breaches, emphasizing the role of security awareness and human-centered controls. Third-party involvement rose to 48% of incidents, increasing exposure through software supply chains and vendor relationships. Ransomware remains dominant, affecting 96% of small and midsize businesses. Analysis of more than 31,000 security incidents and over 22,000 confirmed data breaches across 145 countries identifies vulnerability exploitation, third-party risk, ransomware, and human error as primary drivers of compromise.

"Vulnerability exploitation (31%) overtook credential abuse (13%) as the top initial access vector in the 2026 Verizon DBIR."

"AI-driven cyberattacks are accelerating, with threat actors using GenAI for phishing, reconnaissance, and malware development."

"Humans accounted for 62% of breaches, underscoring the importance of security awareness and human-centered security strategies."

"Third-party breaches surged to 48% of incidents, highlighting growing risks in the software supply chain and among vendors."

Read at TechRepublic