IR Trends Q1 2026: Phishing reemerges as top initial access vector, as attacks targeting public administration persist

Phishing reemerged as the most observed means of gaining initial access, accounting for over a third of the engagements where initial access could be determined. Phishing has not been the top vertical for initial access since Q2 2025.

First seen on blog.talosintelligence.com

Jump to article: blog.talosintelligence.com/ir-trends-q1-2026/