Unit 42 reports top five initial access vectors for September 2026: edge exploitation, credential abuse, social engineering, supply chain, drive-by
Unit 42 Threat Intelligence published its overview of the top five initial access threat vectors observed in September 2026. Adversary activity relied heavily on external edge exploitation and identity compromise, with public-facing infrastructure and legitimate credential abuse as the primary footholds for intrusion campaigns. Social eng…