Accessibility Resource CenterSkip to main content
About UsCareers
Support
Our Company
  • Our Company Overview
  • Who We Are Who We Are
    • Overview
    • Our Culture
    • History and Timeline
    • Headquarters & Contact Info
    • Verizon Fact Sheet
    • Leadership
  • What We Do What We Do
    • Overview
    • 5G
    • Innovation Labs
    • 4G LTE
    • Broadband & Fiber
    • Internet of Things
    • Managed Security
    • Verizon Ventures
  • How We Operate How We Operate
    • Overview
    • Code of Conduct
    • Management Governance
    • Open Internet
    • Policies
    • Retiree Information
    • State Government Affairs
 
News
  • News Center News Center
    • News Center
    • Networks & Platforms
    • Products & Plans
    • Responsible Business
    • Financial
    • Public Safety
    • Noticias
  • News Releases News Releases
    • News Releases
    • Media Contacts
    • B-roll and images
    • RSS Feeds
    • Emergency resource center
    • Verizon Fact Sheet
 
Responsibility
  • Responsibility Overview Responsibility Overview
    • Responsible Business Report
  • Digital Inclusion Digital Inclusion
    • Overview
    • Verizon Innovative Learning
    • Verizon Innovative Learning HQ
    • Small Business Program
  • Environmental Responsibility Environmental Responsibility
    • Disaster Resilience
  • Human Prosperity Human Prosperity
    • Overview
    • Reskilling Program
    • Employee Volunteers
  • Sharing our Success Sharing our Success
    • Overview
    • Giving and Grants
    • Employee Giving
  • Product Responsibility Product Responsibility
    • Overview
    • Accessibility
    • Account Security
    • Privacy Policy
  • Parenting in a Digital World Parenting in a Digital World
    • Overview
    • Digital Parenting 101
    • Young children 3-8
    • Preteens 9-12
    • Teenagers 13-18
    • By topic
    • Meet the editorial team
 
Investors
  • Investor Relations overview
  • Financial Reporting Financial Reporting
    • Overview
    • SEC Filings
    • Annual Reports
    • Quarterly Earnings
    • Stock Information
    • Dividend History
    • Tax Information
    • Fixed Income
    • Asset-backed Securitization
  • Corporate Governance Corporate Governance
    • Overview
    • Board of Directors
    • Board Committees
  • Shareowner Services Shareowner Services
    • Overview
    • Cost Basis Calculator
    • Shareowner FAQs
  • Responsible Business Reporting Responsible Business Reporting
    • Overview
  • News & Events News & Events
    • Investor Events & Webcasts
    • Investor News
    • Investor Calendar
    • Email Alerts
  • Contact Investor Relations
 
Support
About UsCareers
end of navigation menu
  1. About
  2. News
  3. Networks & Platforms
  4. Network Solutions for Business
  5. 2024 Data Breach Investigations Report: Vulnerability exploitation boom threatens cybersecurity
News Center
  1. Menu
    All News
    Networks & Platforms
    Products & Plans
    Responsible Business
    Public Safety
    Financial
    Noticias
    News Releases
    Media Contacts
    B-roll and images
    Verizon Fact Sheet
    RSS Feeds
    Emergency Resources
    Cable Facts
05/01/2024|Networks & Platforms|Network Solutions for Business

2024 Data Breach Investigations Report: Vulnerability exploitation boom threatens cybersecurity

Media contact
Carlos Arcila
908-202-0479
Carlos.Arcila@verizon.com
Nilesh Pritam
656-248-6599
Nilesh.Pritam@sg.verizon.com
Sebrina Kepple
sebrina.kepple@verizon.com
DBIR Media Resources
Breaking down the 2024 Verizon Data Breach Investigations Report

What you need to know:

  • Vulnerability exploitation surged by nearly 3X (180%) last year.

  • Ransomware and the meteoric rise of extortion techniques accounted for a third (32%) of all breaches.

  • More than two-thirds (68%) of breaches involve a non-malicious human element.

  • 30,458 security incidents and 10,626 confirmed breaches were analyzed in 2023—a two-fold increase over 2022.

  • Verizon security by the numbers: 4,200+ networks managed globally, 34 trillion raw logs processed/year, and 9 security operation centers around the globe.

BASKING RIDGE, NJ – Verizon Business today released the findings of its 17th-annual Data Breach Investigations Report (DBIR), which analyzed a record-high 30,458 security incidents and 10,626 confirmed breaches in 2023—a two-fold increase over 2022.

The exploitation of vulnerabilities as an initial point of entry almost tripled from the previous year, accounting for 14% of all breaches. This spike was driven primarily by the increasing frequency of attacks targeting vulnerabilities on unpatched systems and devices (zero-day vulnerabilities) by ransomware actors. The MOVEit software breach was one of the largest drivers of these cyberattacks, first in the education sector and later spreading to finance and insurance industries.

“The exploitation of zero-day vulnerabilities by ransomware actors remains a persistent threat to safeguarding enterprises,” said Chris Novak, Sr. Director of Cybersecurity Consulting, Verizon Business.

In a possible relief to some anxieties, the rise of artificial intelligence (AI) was less of a culprit vs challenges in large-scale vulnerability management. “While the adoption of artificial intelligence to gain access to valuable corporate assets is a concern on the horizon, a failure to patch basic vulnerabilities has threat actors not needing to advance their approach,” Novak said.

Analysis of the Cybersecurity Infrastructure and Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog revealed that on average it takes organizations 55 days to remediate 50% of critical vulnerabilities following the availability of patches. Meanwhile, the median time for detecting the mass exploitations of the CISA KEV on the internet is five days.

“This year’s DBIR findings reflect the evolving landscape that today’s CISO’s must navigate-- balancing the need to address vulnerabilities quicker than ever before while investing in the continued employee education as it relates to ransomware and cybersecurity hygiene,” said Craig Robinson, Research Vice President, Security Services at IDC. “The breadth and depth of the incidents examined in this report provides a window into how breaches are occurring, and despite the low-level of complexity are still proving to be incredibly costly for enterprises.”

Last year, 15% of breaches involved a third party, including data custodians, third-party software vulnerabilities, and other direct or indirect supply chain issues. This metric—new for the 2024 DBIR— shows a 68% increase from the previous period described in the 2023 DBIR.

The human element continues to be the front door for cybercriminals

Most breaches (68%), whether they include a third party or not, involve a non-malicious human element, which refers to a person making an error or falling prey to a social engineering attack. This percentage is about the same as last year. One potential countervailing force is the improvement of reporting practices: 20% of users identified and reported phishing in simulation engagements, and 11% of users who clicked the email also reported it.

“The persistence of the human element in breaches shows that there is still plenty of room for improvement with regard to cybersecurity training, but the increase in self-reporting indicates a culture change that destigmatizes human error and may serve to shine a light on the importance of cybersecurity awareness among the general workforce,” Novak added.

Other key findings from this year’s report include:

  • 32% of all breaches involved some type of extortion technique, including ransomware

  • Over the past two years, roughly a quarter (between 24% and 25%) of financially motivated incidents involved pretexting

  • Over the past 10 years, the Use of stolen credentials has appeared in almost one-third (31%) of all breaches

  • Half of the reaches in EMEA are internal

  • Espionage attacks continue to dominate in APAC region

View the 2024 Data Breach Investigation Report (DBIR):

For more information on ways to help defend against zero-day vulnerabilities and other cyber threats, visit here.

Tags:
Company Reports

Related Articles

Verizon issues Green Bond Report
02/06/2020

Today, Verizon issued its Green Bond Report outlining the allocation during 2019 of net proceeds from the issuance of its inaugural green bond to eligible green investments.

Buffalo Bills announce Verizon as Official 5G Network and a Founding Partner of new Highmark Stadium
05/12/2025

As the Official 5G Network for the new Highmark Stadium, Verizon will own the neutral host Distributed Antenna System (DAS) and provide technology and wireless solutions to keep fans connected.

Whether you are raising a concern or have only a question, we want you to know it’s important to us. You are about to visit a third-party website, and the information you provide will be submitted directly to Verizon Ethics. If you have any questions about how the information you share will be used, please view our Ethics Privacy Notice.

Proceed
Services & Solutions
  • Verizon.com
  • Mobile Plans
  • Mobile Devices
  • Home Services
  • Small and Medium Business
  • Enterprise Solutions
  • Verizon Connect
  • Public Sector
  • Partner Solutions
Support
  • Mobile Online Support
  • Home Online Support
  • Contact Customer Support
  • Sign in to your Account
  • Store Locator
  • Account Security & Fraud Claims
  • Accessibility
Innovation
  • Innovation Labs
  • Verizon Ventures
Network Technologies
  • 4G LTE
  • 5G
  • Fiber Optics
  • Multi-Access Edge Compute (MEC)
Careers
  • Welcome to the #VTeamLife
  • Life at Verizon
  • Culture & Diversity
  • Search Open Roles
  • Careers Site Map
Follow Verizon News
  • twitter
  • instagram
Follow Inside Verizon
  • twitter
  • instagram
Follow Verizon Careers
  • linkedin
  • twitter
  • instagram
Follow Customer Support
  • facebook-official
  • twitter
Follow VerizonGreen
  • twitter
  • Privacy Policy
  • California Privacy Notice
  • Health Privacy Notice
  • Your Privacy Choices
  • Terms & Conditions
  • Accessibility
  • Open Internet
  • Important Consumer Information
  • About Our Ads
  • Site Map
© 2025 Verizon