Beyond Bugs: 69% of initial access events aren’t bug-driven

The author reviews the Verizon 2026 Data Breach Investigations Report, noting exploited vulnerabilities now account for 31% of initial access events while most attacks originate from other vectors, patching KEVs is increasingly difficult, ransomware volume is up even as payments decline, and shadow AI adoption is rising; the piece recommends prioritizing critical patches and improving asset/exposure management (and mentions runZero tooling).