73% of Nordic CISOs either explicitly state that no vulnerabilities have been exploited or are unable to point out concrete cases.

Only approximately 1.4% of publicly disclosed vulnerabilities are known to be exploited in real-world attacks.

Google Threat Intelligence Group (GTIG) tracked 90 zero-day vulnerabilities exploited in-the-wild in 2025.

33.5% of the API-related exploits targeted modern APIs, like RESTful and GraphQL.