Palo Alto Networks finds public-facing application exploits lead September cyberattack entry vectors
PANW•Palo Alto Networks’ Unit 42 report ranked exploits of public-facing applications as the leading initial access threat in September 2026, followed by credential abuse, targeted phishing, supply chain compromise and drive-by compromise.
1. Top attack vectors
Unit 42’s September 2026 cybersecurity report ranked exploitation of public-facing applications as the leading initial access threat. Credential abuse ranked second, targeted phishing third, supply chain compromise fourth and drive-by compromise fifth.
