Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
In 2026, the average time from vulnerability disclosure to exploitation has drastically decreased to around 8 hours, down from 53 days in 2024. This rapid weaponization is attributed to advancements in AI, which can autonomously discover and exploit vulnerabilities. The 2026 Verizon Data Breach Inve...
Microsoft is set to retire the RC4 cipher for administrative authentication in Active Directory by 2026. This decision addresses vulnerabilities that have been exploited in significant cyberattacks over the past decade. The move is part of a broader effort to enhance security standards in response t...
In 2025, Microsoft addressed a total of 1,246 Common Vulnerabilities and Exposures (CVEs), with 158 classified as critical. Among these, 41 were zero-day vulnerabilities, and a significant portion, 38.3%, were related to elevation of privilege. This extensive patching effort highlights the ongoing s...
