Initial Access Trends

In this episode of the mnemonic security podcast, we’re joined by Will Thomas, Senior Threat Intelligence Advisor at the CTI company Team Cymru, to discuss the latest trends in initial access. Will shares what he is currently observing, including the growing exploitation of edge devices, the targeting of SaaS environments using infostealers and stolen credentials, and the rise of ClickFix-style social engineering techniques. He also explains how these trends differ between threat actors depending on their motivations, and what organisations should prioritise to stay ahead. Will outlines practical steps defenders can take and the key questions security teams should be asking to stay ahead of attackers. The conversation also covers Will’s main concerns around threat actors’ use of LLMs, and how CTI and threat hunting should ideally be carried out to support security operations. Want more Will Thomas? Here you can find his Ransomware-Tool-Matrix: And his own podcast Future of Threat Intelligence (FoTI) Podcast: Send us Fan Mail

You can listen to Initial Access Trends online on Radio and Podcast. Open the player on this page to stream the available audio.

Initial Access Trends is an episode from mnemonic security podcast by mnemonic.

This episode is 33:12 long.

This episode was published on Mar 9, 2026.

Yes. Use the heart button on the episode page to add it to your favorite episodes list.

Yes. This page shows related episodes from mnemonic security podcast when more episodes are available from the podcast feed.