Top 5 Initial Access Threat Vectors Observed by Unit 42 in September 2026
Palo Alto Networks, Friday, October 16th, 2026
Unit 42 ranks September's top initial access vectors, led by exploitation of public-facing applications and identity abuse.
Unit 42 Threat Intelligence summarized the top five initial access threat vectors observed in September 2026, with exploitation of public-facing applications as the primary entry vector and legitimate credential abuse and identity compromise also prominent.
Social engineering drove targeted operations against public sector and critical infrastructure organizations.
The report also flags high-impact supply chain intrusions and zero-interaction drive-by compromises as systemic risks.