Skip to main content

Cybersecurity statistics / Applications

Across ransomware attacks that begin with exploited vulnerabilities, compromised credentials, or brute force, 38% of initial compromises occur in exposed applications and systems.

PublisherSophos
ReportThe State of Ransomware 2026
Published15 July 2026
TopicsApplications, Ransomware

Published by Sophos in The State of Ransomware 2026, 15 July 2026. The figure is taken from the report as published; the full methodology is in the source.

View the original report

Related statistics

Across organizations in Europe, LinkedIn is the most commonly used personal app at 89%, followed by Google Drive at 84% and ChatGPT at 82%.
Netskope, 31/05/2026
It takes an average of 84 days to patch even the most critical flaws in applications.
Contrast Security, 17/07/2025
On average, applications contain 30 serious vulnerabilities.
Contrast Security, 17/07/2025
Applications face an average of 17 new application vulnerabilities per month.
Contrast Security, 17/07/2025
The average application is exposed to 81 confirmed, viable attacks each month that evade other defences
Contrast Security, 17/07/2025
Developer teams remediate, on average, 6 application vulnerabilities per month.
Contrast Security, 17/07/2025

Get the newsletter

Weekly cybersecurity statistics by email.