Q3 2026 Threat Update: Attackers Are Exploiting Vulnerabilities Within 3 Days
Three days is the average time between a high-severity vulnerability becoming public and its exploitation, according to the latest Quarterly Threat Landscape Report from Rapid7. And 71% of the exploitation tracked in Q3 occurred within the first seven days.
Summary from Rapid7 Blog.
Explained
The technology and terms in this story. Learn more
- AttackRansomwareMalware that encrypts an organisation's systems and demands payment, often after stealing data to leak.
- ConceptAPT · Advanced persistent threatA well-resourced hacking group, usually tied to a government, that runs long, targeted campaigns.
- ConceptExploitCode or a technique that turns a software flaw into something an attacker can actually use.