Data breaches exploiting software vulnerabilities surge, overtaking credential theft

Verizon’s annual breach report finds software vulnerability exploitation now starts 31% of breaches, overtaking credential theft for the first time.

Attackers are using generative AI to spot targets, gain initial access, and build malware faster, shrinking exploit timelines from months to hours.

The report also flags unauthorized employee use of AI, or “shadow AI,” as a growing internal breach risk.

The findings underscore how AI is speeding up attacks and forcing defenders to adopt AI-assisted security controls faster.