rethinking ye old truths

A commentary on a Verizon Business four-year breach study reports that most breaches are driven by external actors exploiting internal weaknesses: 73% of incidents originated outside, yet 62% of breaches resulted from internal errors like misconfigurations and missing patches. The study highlights that breaches typically involve chains of events, target the application layer more than the OS, fewer than a quarter involve direct vulnerability exploitation, insider-caused breaches are fewer but larger, and business partners account for well over a third of cases.