VendorsFlashpoint
Flashpoint
Cybersecurity reports and statistics published by Flashpoint
8 categories3 reports
Research Reports
Reports and publications from Flashpoint
Recent Statistics & Reports
Over 11.1 million machines were infected with infostealers in 2025.
5/27/2026•
MalwareInfostealers
Ransomware-as-a-Service (RaaS) groups were responsible for over 87% of all ransomware attacks.
5/27/2026•
RansomwareRaaS
Vulnerability disclosures increased by 12% between January 2025 and December 2025.
5/27/2026•
VulnerabilitiesVulnerability Disclosures
In 2025, one in three vulnerabilities (33%) had publicly available exploit code.
5/27/2026•
VulnerabilitiesExploit Code
3.3 billion compromised credentials and cloud tokens make identity the primary exploit vector.
5/27/2026•
IdentityCompromised CredentialsCompromised Cloud Tokens
AI-related illicit discussions increased by 1,500% between November and December 2025.
5/27/2026•
Artificial IntelligenceCybercrimeThreat Actors
Ransomware incidents increased by 53% between January 2025 and December 2025.
5/27/2026•
Ransomware
Zero-day vulnerabilities are being mass exploited in as little as 24 hours after discovery.
5/27/2026•
VulnerabilitiesZero-Day VulnerabilitiesZero-Day Exploits
N-day vulnerabilities represent over 80% of all Known Exploited Vulnerabilities (KEVs) tracked over the past four years.
2/14/2026•
VulnerabilitiesExploit TrendsN-Day Vulnerabilities
In 2025, 37 N-day vulnerabilities and 52 zero-day vulnerabilities specifically targeted security and perimeter software.
2/14/2026•
VulnerabilitiesN-Day VulnerabilitiesZero-Day Vulnerabilities
Of the 65 CVEs discussed by the BlackBasta ransomware group, 54 are Known Exploited Vulnerabilities (KEVs).
2/14/2026•
RansomwareVulnerabilitiesBlackBasta
The Lazarus threat actor group has over 40 distinct designations across the industry.
2/14/2026•
Threat ActorsAttributionLazarus
Exploit weaponization can occur in under 24 hours.
2/14/2026•
ExploitationExploit Weaponization
Average Time to Exploit (TTE) declines year-by-year: 745 days in 2020, 518 days in 2021, 405 days in 2022, 296 days in 2023, 115 days in 2024, and 44 days in 2025.
2/14/2026•
Vulnerability ManagementAverage Time To ExploitTTE
Most large organizations have accurate inventories for only about 25% of their total assets.
2/14/2026•
Asset ManagementEnterprise SecurityAsset Inventory
Ransomware has risen by 179% since the start of 2025.
7/31/2025•
Ransomware
Vulnerability disclosures increased by 246% since the start of 2025.
7/31/2025•
Vulnerability disclosures
Over the past four months, data breaches surged by 235%.
7/31/2025•
Data breaches
The theft of credentials via information-stealing malware has skyrocketed by 800% since the start of 2025.
7/31/2025•
InfostealerCredentials
The volume of disclosed vulnerabilities is up by a staggering 246% since February 2025.
7/31/2025•
Vulnerabilities
Showing 1-20 of 23 results