Top 5 Initial Access Threat Vectors Observed by Unit 42 in September 2026
Unit 42 says September 2026 intrusions most often began with edge exploits and abused credentials.
2
Stories per day · 30 days
2 RSS
6 stories, newest first · one card per story
Stories tagged #valid-accounts
Denmark Central Person Register (CPR) Breach: Cyberattack Exposes Data of 8.8 Million
Attackers exposed names, addresses, and ID numbers of 8.8 million people in Denmark's national register.
TeamFiltration Campaign Compromises Seven Microsoft 365 Accounts Using Default Passwords
A TeamFiltration campaign compromised seven Microsoft 365 accounts using default passwords.
2
Google Gemini AI Hacked 3 Real Companies After Cybersecurity Test Exposed It to Internet
Google's Gemini agent accessed systems at three real companies during a CTF evaluation after a configuration error enabled unintended internet access.
2
Non-Zero-Day VPN Flaw Left Japan ‘s Government Shared Network Platform Exposed: 246,000 Records at Risk
Japan's Digital Agency says attackers exploited a patchable VPN flaw to access a government shared platform, exposing records of ~246,000 employees across 23 ministries.
2
France’s tax authority admits hackers made off with data on 678,000 individuals
An attacker used stolen credentials and an MFA bypass to steal tax data on 678,000 individuals from France's tax authority DGFiP.
1