Latest cybersecurity reporting from selected sources.

ReliaQuest warns that initial access vulnerability exploitation is driving successful ransomware attacks

This new CitrixBleed lookalike flaw is being exploited in the wild to gain initial access, according to ReliaQuest

Mandiant’s M-Trends report found that credential theft rose significantly in 2024, driven by the growing use of infostealers

Travelers found that ransomware groups are focusing on targeting weak credentials on VPN and gateway accounts for initial access, marking a shift from 2023

Forescout highlighted a 43% increase in published vulnerabilities in H1 2024, with attackers targeting flaws in VPNs and network infrastructure for initial access

A new report by Cato Networks found that exploiting old vulnerabilities in unpatched systems is one of threat actors’ favorite initial access vectors

The growth of software supply chain attacks pushed vulnerability exploits to the third most used initial access method, Verizon found

GuidePoint said the threat actor gained initial access via vulnerabilities in a TeamCity server

More ransomware attacks now start with vulnerability exploitation than phishing, says Corvus Insurance

But IBM warns credential compromise is number one initial access vector

It is the first campaign in which the hacker group exploits SysAid apps as a vector for initial access