Google found bug exploits caused 44.5% of investigated intrusions versus 27% for credential theft.
Part of the PlainSec briefing for 2026-03-23