New research from Rapid7 shows that attackers are wasting no time exploiting severe vulnerabilities. In the third quarter, the average time between disclosure and exploitation for high-severity issues was just three days.
Ransomware dominated the threat landscape during the period, accounting for a large share of the incidents Rapid7 tracked. The report underscores that established attack patterns still pose the most pressing risk.
Despite heavy industry hype around artificial intelligence, AI appeared in only 8% of tracked incidents. That suggests AI-driven attacks remain a minority activity for now, while more conventional tactics persist.