In brief

The article reports that Verizon’s 2026 Data Breach Investigations Report identifies vulnerability exploitation as the leading initial access vector for breaches, overtaking stolen credentials for the first time and accounting for 31% of incidents. This trend is especially significant for critical infrastructure and industrial sectors, where connected OT environments, vendor access, and exposed systems can turn software flaws into operational risks. The report also warns that AI-assisted attacks are shortening the time between vulnerability disclosure and exploitation, leaving defenders with much less time to respond.

Verizon also found that ransomware remained highly prevalent, appearing in 48% of breaches, while third-party involvement rose sharply to 48% of all breaches. Remediation remains a major weakness: only a minority of known exploited critical vulnerabilities were fully fixed in 2025, and the median time to resolve vulnerabilities increased. The article highlights manufacturing as a particularly exposed sector, where ransomware, system intrusion, vulnerability exploitation, and supply chain disruption can lead not only to data loss but also to production shutdowns, operational downtime, and wider economic damage.

Source: Industrial Cyber

‍

‍