Beazley Security Labs recorded a 15% increase in critical zero-day advisories issued to clients in Q1 2026.

Mean time to exploit vulnerabilities was -7 days, indicating exploitation routinely occurs before patches are released.

54% of professional pentesters report having discovered a Zero-Day or N-Day vulnerability that had no existing public patch or advisory.

42% of vulnerabilities were exploited before public disclosure.

Only 29% of IT leaders expressed very high confidence in their ability to recover critical data after a zero-day exploit, while 59% were only somewhat confident.

29% of leaders at financial services firms say they are unprepared to recover effectively from a Zero-day exploit.