IR Trends Q1 2026: Phishing reemerges as top initial access vector, as attacks targeting public administration persist (opens in new tab)

Phishing reemerged as the most observed means of gaining initial access, accounting for over a third of the engagements where initial access could be determined. Phishing has not been the top vertical for initial access since Q2 2025.