Exploits remained the most common initial infection vector for the sixth consecutive year, accounting for 32% of intrusions.

Email phishing accounted for 6% of intrusions in 2025.

Targeted intrusions against financial institutions increased by 109% year-over-year.

There has been a 25% year-on-year increase in financial institution intrusion events for 2024.