Verizon DBIR: Enterprises Face a Dangerous Vulnerability Glut

Aggregation of mid-May 2026 Dark Reading coverage highlighting a widespread vulnerability and exploitation surge: Verizon's DBIR shows exploits account for ~31% of initial breach access while patching lags. Multiple zero-days and high-severity flaws are being actively exploited (notably an unpatched Microsoft Exchange XSS impacting OWA), a CVSS 10.0 Cisco SD‑WAN flaw is exploited in the wild, and emerging Linux privilege-escalation ("Dirty Frag") may be under limited exploitation. Supply-chain and worm activity (Shai‑Hulud/TeamPCP) is infecting npm/RubyGems and third‑party packages; AI-related