The top initial access vector observed in 2024 was a tie between exploitation of public facing applications and use of valid account credentials, both representing 30% of X-Force incidence response engagements.
The top initial access vector observed in 2024 was a tie between exploitation of public facing applications and use of valid account credentials, both representing 30% of X-Force incidence response engagements. — This cybersecurity statistic was published by IBM in April 2025. It covers topics including Initial access, Public facing application, Valid account credentials. The original data appears in IBM X-Force 2025 Threat Intelligence Index. For the full methodology and detailed findings, refer to the original report.
Share or Copy this stat
Frequently Asked Questions
What does this statistic say?
The top initial access vector observed in 2024 was a tie between exploitation of public facing applications and use of valid account credentials, both representing 30% of X-Force incidence response engagements. This data was published by IBM and covers Initial access, Public facing application, Valid account credentials.
Where does this data come from?
This statistic comes from IBM X-Force 2025 Threat Intelligence Index, published by IBM on April 17, 2025. You can view the original report at https://www.ibm.com/account/reg/us-en/signup?formid=urx-53633.
What cybersecurity topics does this cover?
This statistic relates to Initial access, Public facing application, Valid account credentials. Browse more statistics on Initial access or from IBM .