Attackers exploited vulnerabilities an average of seven days before public disclosure in 2025.
| Publisher | Black Kite |
| Report | 2026 Supply Chain Vulnerability Report |
| Published | 19 May 2026 |
| Topics | Exploitation, Vulnerability Management, Cybersecurity |
Published by Black Kite in 2026 Supply Chain Vulnerability Report, 19 May 2026. The figure is taken from the report as published; the full methodology is in the source.