Security Teams Urged to Focus on Remote Unauthenticated Exploits
Original title: Security teams urged to center defense on the single profile attackers target most
Attackers exploit new high-severity vulnerabilities within three days of disclosure, favoring remote unauthenticated zero-click flaws.
Rapid7's Q3 2026 threat report recorded 43 newly exploited vulnerabilities, up 19% year-over-year. New high-severity CVEs rose 133% while public proof-of-concept code increased 86%. Most exploits target unauthenticated remote systems and occur within one week of disclosure. Security teams should prioritize patching high-risk exposed assets rather than patching everything monthly.
Unconfirmed: The text notes AI use in attacks was limited but experts predict growing AI-orchestrated campaigns.
- 71% of tracked exploitation landed within one week of disclosure
- Nearly 80% of exploits are remote, unauthenticated, and zero-click
- AI appeared in only 8% of tracked attacks as a tactical tool
- Attackers repackage flaws already in vendor advisories or CISA KEV
- High-severity flaw exploitation has accelerated faster than novel zero-days
- Organizations
- Rapid7
- Countries
- United States
From the original article
3 min read at csoonline.com
Attackers are increasingly focusing on a limited range of critical vulnerabilities to run attacks with flaws packaged into exploits within as little as three days. Rapid7’s latest Quarterly Threat Landscape report found the number of newly exploited vulnerabilities in Q3 of 2026 was 43, up 19% year on year.
csoonline.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.