Exploits remained the most common initial infection vector for the sixth consecutive year, accounting for 32% of intrusions.

Highly interactive voice phishing accounted for 11% of intrusions, making it the second-most common initial infection vector.

Stolen credentials are the second highest initial infection vector, making up 16% of investigations. This rise means stolen credentials were the second most common initial infection vector for the first time in 2024.

Exploits continue to be the most common initial infection vector (33%).