The Verizon 2025 Data Breach Investigations Report (DBIR): Six Trends You Can’t Ignore | Qualys
Summary: The 2025 Verizon DBIR, analyzing 12,195 confirmed breaches, found vulnerability exploitation as the initial access vector rose to 20%, a 34% increase that approaches credential abuse at 22%, while edge devices and VPNs accounted for 22% of exploitation targets, up from 3% in 2024. Ransomware appeared in 44% of breaches (up from 32%), third-party involvement doubled to 30%, espionage-motivated breaches reached 17%, and 46% of compromised systems with corporate logins were non-managed devices.
What's compelling: The median time to fully remediate edge device vulnerabilities was 32 days, while the median time for those vulnerabilities to be mass exploited was zero days - they were in CISA's KEV catalog on or before CVE publication, so patching on a monthly cycle means you are already too late.
Read the original at Qualys Blog ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026