Verizon DBIR: Basic Security Gaffes Underpin Bumper Crop of Breaches

The Verizon DBIR shows a sharp rise in breaches initiated via exploited vulnerabilities—driven largely by the MOVEit zero-day and subsequent mass exploitation by Cl0p and others—alongside a marked increase in supply-chain incidents and extortion-based breaches; organizations still suffer from slow patching and pervasive human-failure vectors (phishing/misconfiguration), making timely vulnerability management, supply-chain risk controls, and layered defenses urgent priorities.