10/14/2026
The 2026 Verizon Data Breach Investigations Report says 31% of breaches now start with a software vulnerability, which puts it ahead of stolen passwords as the top way in. Plenty of owners still think of breaches as a password problem, so that number caught my attention.
Unpatched software is the boring job nobody budgets for. When we're on site, the first things I want to see are what's running, how old it is, and whether anyone has a schedule for updates. If the honest answer is "we update when something breaks, " that's the gap an attacker is counting on.
Patching on a set schedule is a lot less exciting than a new firewall, but it closes doors that are already open.
Read the complete 2026 Data Breach Investigations Report (DBIR) for an in-depth, authoritative analysis of the latest cyber threats, data breaches, and actionable cybersecurity risks.