Vulnerability Exploitation Top Breach Entry Point, 2026 Industry-Wide DBIR Finds

Verizon (NYSE:VZ) released the 19th Data Breach Investigations Report, highlighting how AI is reshaping cybersecurity risk.

Rhea-AI Summary

Verizon (NYSE:VZ) released the 19th Data Breach Investigations Report, highlighting how AI is reshaping cybersecurity risk. For the first time, 31% of breaches begin with vulnerability exploitation, surpassing stolen credentials. The report also notes rising mobile social engineering, growing shadow AI use at work, and increased third-party breach involvement.

Argus May 19 session

+2.10% close to close Open Argus

Details

News Market Reaction – VZ

On May 19, the day this news came out, VZ closed 2.10% above the previous close.

Data tracked by StockTitan Argus for the May 19 session.

Key Figures

Breaches via vulnerabilities: 31% Mobile attack success: 40% higher Employee AI tool use (prior): 15% +5 more

Breaches via vulnerabilities

31%

Share of breaches starting with vulnerability exploitation in 2025 DBIR data

Mobile attack success

40% higher

Success rate of mobile social engineering vs traditional email phishing

Employee AI tool use (prior)

15%

Employees frequently using AI tools at work in prior year

Employee AI tool use (current)

45%

Employees frequently using AI tools at work in latest DBIR period

Third-party breach increase

60%

Increase in breaches involving third parties

Breaches with third party

48%

Share of all breaches now involving a third party

AI bot traffic growth

21% month-over-month

Growth rate of AI bot Internet crawler traffic

2025 revenue

$138.2 billion

Verizon 2025 revenues mentioned alongside DBIR release

Historical Context

5 past events · Latest: May 14

5 events

1. May 14

   Network JV announcement

   24h Move

   -0.3%

   Joint venture with peers to reduce dead zones via satellite D2D connectivity.

2. May 11

   Debt tender offers

   24h Move

   +0.0%

   Cash tender offers and consent solicitations for 20 note series, capped at $1.25B.

3. May 11

   Private exchanges

   24h Move

   +0.0%

   Private exchange offers for 11 note series into new Verizon notes with similar economics.

4. May 08

   Investor conferences

   24h Move

   +0.3%

   CEO presentations at two May 2026 investor conferences, with webcast access.

5. May 06

   Resilience technology

   24h Move

   +0.2%

   Launch of digital twin, expanded satellite fleet and disaster-response assets for hurricanes.

24h Move is the share-price change in the day after each event; other market factors may also have contributed.

Key Terms

vulnerability exploitation, data breach investigations report, social engineering, shadow AI, +4 more

8 terms

vulnerability exploitation technical

"for the first time in 19 years of the DBIR being published, exploiting vulnerabilities has surpassed"

Vulnerability exploitation is the act of taking advantage of a weakness in a computer system, software, or network to gain unauthorized access, disrupt operations, or steal information. For investors it matters because successful attacks can cause direct financial losses, halt business operations, damage customer trust and trigger regulatory fines—similar to a criminal finding and using an unlocked door to break into a storefront, the resulting harm can reduce a company's revenue and valuation.

data breach investigations report technical

"The 19th edition of the Data Breach Investigations Report (DBIR) confirms AI-driven speed"

A data breach investigations report is a document that summarizes what went wrong when sensitive information was exposed, how the breach occurred, which data was affected, and what steps were taken to stop it and prevent a repeat. For investors it functions like a post‑accident report: it reveals potential legal costs, regulatory fines, lost customer trust, and required fixes that can affect a company’s future earnings and risk profile.

social engineering technical

"threat actors are pivoting to mobile-centric social engineering (fake text messages and voice calls)"

Social engineering is the practice of manipulating people into revealing confidential information, granting access, or taking actions that compromise security, often by posing as a trusted person or using urgent, persuasive stories. For investors it matters because these scams can lead to direct financial loss, theft of sensitive corporate data, disrupted operations, or damage to a company’s reputation — similar to a con artist who tricks a business into handing over its keys.

shadow AI technical

"Shadow AI, referring to employees using unapproved AI tools at work, is now the third most common"

Shadow AI describes employees using artificial intelligence tools or services without formal approval, oversight, or integration into official systems — for example, personal subscriptions, free web apps, or browser add-ons. For investors this matters because these hidden tools can expose sensitive data, create compliance or legal problems, produce unreliable results, and lead to unexpected costs or reputational damage, much like an unapproved gadget in a factory that creates safety and billing surprises.

data exfiltration technical

"highlighting an elevated risk of data exfiltration associated with unapproved platforms."

Data exfiltration is the unauthorized copying or removal of sensitive information from an organization’s systems, like someone sneaking files out of a locked office. It matters to investors because stolen data can lead to direct financial loss, regulatory fines, legal liability, damage to customer trust, and operational disruption — all of which can reduce revenue and share value and create unpredictable costs for the company.

ai bot internet crawlers technical

"AI Bot Internet Crawlers are experiencing a massive 21% month-over-month growth"

AI bot internet crawlers are automated programs that use artificial intelligence to browse, read and extract information from websites at large scale, acting like a digital librarian that scans pages to pull out text, images and data. They matter to investors because they can speed up market research and competitive monitoring but also create risks—such as inaccurate or misused data, strain on a company’s web infrastructure, copyright or privacy disputes, and shifts in web traffic or revenue models—that can affect a business’s costs, reputation and regulatory exposure.

secure by design technical

"integrating AI into 'secure by design' frameworks, and leveraging AI within defense-in-depth"

An engineering approach that builds security into a product, system, or process from the very beginning rather than bolting it on later. For investors, it matters because solutions designed this way tend to have fewer costly breaches, lower remediation and compliance expenses, and a stronger reputation—similar to installing a safe during construction instead of adding locks after a break-in, which helps protect long-term value and predictable risk.

defense-in-depth technical

"integrating AI into 'secure by design' frameworks, and leveraging AI within defense-in-depth strategies"

A strategy of layered safeguards that combines multiple, different controls to prevent failures, breaches or accidents. Like a series of locked doors, alarms and backup plans protecting the same asset, each layer reduces the chance that a single problem becomes a crisis; for investors, clear defense-in-depth means management is actively lowering operational, cybersecurity and regulatory risk, which can protect earnings, reputation and long-term value.

AI-generated analysis. How Rhea-AI works. Not financial advice.

See more from StockTitan in Google Search and AI answers. Adds StockTitan as a preferred source · opens Google

Add on Google Not now

The 19th edition of the Data Breach Investigations Report (DBIR) confirms AI-driven speed as a new challenge, pushing security strategy toward fundamental resilience

NEW YORK, May 19, 2026 (GLOBE NEWSWIRE) -- Verizon published the annual Data Breach Investigations Report (DBIR) today, which shows how Artificial Intelligence (AI) is impacting the cyber threat landscape as a whole. Although this report uses 2025 data—predating the latest frontier model advancements—the trends are clear: AI is fundamentally reshaping the cybersecurity industry. And at the same time that AI-detected vulnerabilities are in the news, for the first time in 19 years of the DBIR being published, exploiting vulnerabilities has surpassed stolen credentials to become the number one breach entry point.

Key Findings:

• Nearly a third (31%) of all breaches start with vulnerability exploitation in an AI world: This is the first time in 19 years that it has surpassed stolen credentials as the biggest point of entry. Further, AI is being leveraged by threat actors to accelerate the time to exploit known vulnerabilities, shrinking the window for defense from months to mere hours.
• Interactive, conversational attacks on mobile are on the rise: In terms of the “Human Element” risk of cybersecurity, as people get more savvy about traditional email phishing, threat actors are pivoting to mobile-centric social engineering (fake text messages and voice calls) with a success rate 40% higher than traditional email phishing.
• More employees now use ‘shadow AI’ at work, risking company secrets: Shadow AI, referring to employees using unapproved AI tools at work, is now the third most common non-malicious data leakage related activity. Frequent usage of AI tools by employees has surged from 15% to 45% of employees in a single year, highlighting an elevated risk of data exfiltration associated with unapproved platforms.
• Supply chains get riskier as third-party involvement in breaches is up 60%: As companies rely more heavily on external vendors, threat actors are exploiting those vulnerabilities, with breaches involving a third party now accounting for 48% of all breaches.
• AI Bots are the next frontier: AI Bot Internet Crawlers are experiencing a massive 21% month-over-month growth compared to entirely flat (0.3%) human-led traffic growth, showing where the next set of threats could come from.
  

What it means:

The rapid weaponization of known vulnerabilities by AI can create a capacity crisis for security teams, underscoring the urgent need to prioritize fundamental security and risk management practices. In response, the DBIR is providing Chief Information Security Officers (CISOs) and cybersecurity professionals with actionable, resilient recommendations tailored with today’s AI environment in mind throughout the report. These include preparing for an influx of patches as AI identifies software flaws at an accelerating rate, integrating AI into 'secure by design' frameworks, and leveraging AI within defense-in-depth strategies to minimize the total attack surface

"While the velocity of cyber threats - driven by AI and faster vulnerability exploitation - is increasing, the foundational principles of security and strong risk management remain the most effective defense," said Daniel Lawson, SVP Global Solutions, Verizon Business. "The DBIR reinforces that these fundamentals still hold as organizations strive for resilience."

Call to Action: Download the full 2026 DBIR and review industry specific information on Verizon’s website.

This announcement was originally published by Verizon. Read the original press release.

Verizon Communications Inc. (NYSE, Nasdaq: VZ) powers and empowers how its millions of customers live, work and play, delivering on their demand for mobility, reliable network connectivity and security. Headquartered in New York City, serving countries worldwide and nearly all of the Fortune 500, Verizon generated revenues of $138.2 billion in 2025. Verizon’s world-class team never stops innovating to meet customers where they are today and equip them for the needs of tomorrow. For more, visit verizon.com or find a retail location at verizon.com/stores.

VERIZON’S ONLINE MEDIA CENTER: News releases, stories, media contacts and other resources are available at verizon.com/news. News releases are also available through an RSS feed. To subscribe, visit www.verizon.com/about/rss-feeds/.

Media contact: 
Carlos Arcila
carlos.arcila@verizon.com
908-202-0479

FAQ

AI-generated questions and answers. How Rhea-AI works. Not financial advice.

What are the key findings of Verizon (VZ) 2026 Data Breach Investigations Report?

The 2026 DBIR finds vulnerability exploitation now leads 31% of breaches, surpassing stolen credentials. According to Verizon, mobile-centric social engineering is rising, third-party involvement reaches 48% of breaches, and shadow AI use at work has sharply increased, elevating data leakage risks.

How does AI impact cyber threats in Verizon (VZ) 2026 DBIR?

AI is described as accelerating cyber threats by shrinking exploitation time from months to hours. According to Verizon, threat actors leverage AI to weaponize known vulnerabilities, while AI bots grow traffic 21% month over month, signaling emerging automated attack vectors across the internet.

What does vulnerability exploitation accounting for 31% of breaches mean in Verizon (VZ) 2026 DBIR?

Vulnerability exploitation being 31% of breaches makes it the top breach entry point for the first time. According to Verizon, AI-driven tools help attackers quickly exploit known software flaws, pressuring security teams to improve patching speed and strengthen basic risk management practices.

How common is shadow AI at work according to Verizon (VZ) 2026 DBIR?

Shadow AI has become the third most common non-malicious data leakage activity in workplaces. According to Verizon, frequent use of AI tools by employees jumped from 15% to 45% in one year, raising concerns about sensitive data flowing through unapproved AI platforms.

What does Verizon (VZ) 2026 DBIR say about third-party and supply chain cyber risk?

Third-party involvement in breaches increased 60%, now present in 48% of all breaches. According to Verizon, greater reliance on external vendors expands the attack surface, as threat actors exploit weaknesses in partners and suppliers to gain access to victim organizations’ environments.

What 2025 revenue and scale does Verizon (VZ) report alongside the 2026 DBIR?

Verizon reports 2025 revenue of $138.2 billion, reflecting its large global customer base. According to Verizon, the company serves countries worldwide and nearly all Fortune 500 firms, providing mobility, network connectivity, and security solutions supported by a global, innovation-focused workforce.