Cybersecurity statistics / Vulnerability Exploitation
| Publisher | Google Cloud |
| Report | Cloud Threat Horizons Report H1 2026 |
| Published | 10 March 2026 |
| Topics | Vulnerability Exploitation |
Published by Google Cloud in Cloud Threat Horizons Report H1 2026, 10 March 2026. The figure is taken from the report as published; the full methodology is in the source.
| Organizations that remediate vulnerabilities in 4–7 days are breached by a known vulnerability at a 97% rate. Cloud Security Alliance, 06/06/2026 |
| Organizations that patch vulnerabilities within 24 hours are breached by a known vulnerability at a 77% rate. Cloud Security Alliance, 06/06/2026 |
| Log4j generated 824.9 million IPS hits in 2025. SonicWall, 27/05/2026 |
| Exploited high and critical severity vulnerabilities increased 105% from 71 in 2024 to 146 in 2025. 2026 Global Threat Landscape Report , 27/05/2026 |
| Mean time to exploit vulnerabilities was -7 days, indicating exploitation routinely occurs before patches are released. Mandiant, 27/05/2026 |
| Vulnerability exploitation accounted for 40% of incidents observed by IBM X‑Force in 2025. IBM, 27/05/2026 |
Weekly cybersecurity statistics by email.