As cited
Copy frozen at (site build).
vulnerabilities
Q3 2026 Threat Update: Attackers Are Exploiting Vulnerabilities Within 3 Days
Rapid7's Q3 2026 Threat Landscape Report found that attackers exploit high and critical severity vulnerabilities an average of 3 days after public disclosure, with 71% of exploitation occurring within 7 days. Of 43 newly exploited vulnerabilities tracked, 79% required no authentication or user interaction, creating direct attack paths into exposed systems. The report also notes that 8% of threat activity now incorporates artificial intelligence (AI) for tactical decisions and technique selection during campaigns, shifting from AI's earlier use in content generation.
Why it matters: Security teams face a critical patching window mismatch: attackers move in 3 days while most organizations patch on fixed schedules, making external asset visibility and unauthenticated vulnerability prioritization essential to reduce breach risk before exploitation occurs.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Q3 2026 Threat Update: Attackers Are Exploiting Vulnerabilities Within 3 Days
Rapid7's Q3 2026 Threat Landscape Report found that attackers exploit high and critical severity vulnerabilities an average of 3 days after public disclosure, with 71% of exploitation occurring within 7 days. Of 43 newly exploited vulnerabilities tracked, 79% required no authentication or user interaction, creating direct attack paths into exposed systems. The report also notes that 8% of threat activity now incorporates artificial intelligence (AI) for tactical decisions and technique selection during campaigns, shifting from AI's earlier use in content generation.
Why it matters: Security teams face a critical patching window mismatch: attackers move in 3 days while most organizations patch on fixed schedules, making external asset visibility and unauthenticated vulnerability prioritization essential to reduce breach risk before exploitation occurs.
- Source published
- First seen by Cybersecurity Tracker