2015 Verizon Data Breach Investigations Report (DBIR): Insights from Unit 42
Summary: Palo Alto Networks contributed data to the 2015 Verizon Data Breach Investigations Report for the first time, and its Unit 42 team highlighted findings including that a single piece of malware can be subtly altered into an endless stream of variants that evade signature-based detection. The report states that "Signatures alone are dead," and Unit 42 notes that new CVEs are typically added to exploit kits about a month after initial disclosure and reverse engineering.
Why it matters: Unit 42's point that adversaries prefer an older, unpatched vulnerability over a zero-day because it offers better return on investment means the exploit window you leave open is the one most likely to be used against you.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026