According to Rapid7’s Quarterly Threat Landscape report, attackers are focusing on a limited range of critical vulnerabilities, exploiting them within three days of disclosure.
The vulnerability or weakness
Attackers targeted high-severity vulnerabilities (CVEs rated 7 through 10) and used publicly available proof-of-concept code, with 71% of exploitations occurring within a week.
Earlier attacks and coverage
No earlier related attack in our archive yet.
Business impact
Organizations face rapid exploitation of known vulnerabilities, with attackers taking advantage of a 133% increase in new high-severity CVEs and 86% growth in publicly available exploits.
Industries affected
All industries are affected, but those with remote, unauthenticated, and zero-click vulnerabilities are at higher risk.
Users affected
End users and organizations are at risk if they haven’t updated their systems or patched known vulnerabilities within the critical window of 72 hours.
