Assets with both critical and easily exploitable issues were found across all cloud providers.

27% of assets hosted by Azure were vulnerable to at least one security issue or misconfiguration.

Critical vulnerabilities rose by 37.1% in 2024.

Total number of software vulnerabilities grew by 61% year-over-year (YoY) in 2024.

Linux vulnerabilities soared by 967% in 2024.

macOS vulnerabilities increased by 95% in 2024.

There was a 505% increase in critical flaws in database software.

There was a 213% YoY overall vulnerability growth in database software.

Exploits spiked 657% in browsers.

The number of known exploited vulnerabilities rose by 96% in 2024.

Exploits spiked 433% in Microsoft Office applications. Web browsers and Office applications have emerged as prime targets. Chrome specifically led all products in known attacks.

macOS vulnerabilities increased by 95% in 2024.

There was a 505% increase in critical flaws in database software.

Total number of software vulnerabilities grew by 61% year-over-year (YoY) in 2024.

Open-source risks and cloud misconfigurations followed supply chain vulnerabilities closely at 73%.

Fewer than 1 in 5 organizations use structured prioritization models.

Managing the sheer volume of vulnerabilities and false positives were the biggest challenges in securing code, cited by 78% of respondents.

30% cite budget limitations as their biggest barrier to adopting additional solutions.

91% of organizations experience delays in vulnerability remediation.

91% of organizations experience delays in vulnerability remediation.