Flashpoint

23 stats3 reports

All Statistics

Zero-day vulnerabilities are being mass exploited in as little as 24 hours after discovery.

VulnerabilitiesZero-Day VulnerabilitiesZero-Day Exploits

Ransomware-as-a-Service (RaaS) groups were responsible for over 87% of all ransomware attacks.

RansomwareRaaS

In 2025, one in three vulnerabilities (33%) had publicly available exploit code.

VulnerabilitiesExploit Code

Publicly-available exploits rose by 179% since the start of 2025.

Publicly-available exploits

Over 1.8 billion credentials were stolen in the first half of 2025 alone. The 1.8 billion stolen credentials represent an 800% increase.

Credentials

The volume of disclosed vulnerabilities is up by a staggering 246% since February 2025.

Vulnerabilities

N-day vulnerabilities represent over 80% of all Known Exploited Vulnerabilities (KEVs) tracked over the past four years.

VulnerabilitiesExploit TrendsN-Day VulnerabilitiesKEVs

In 2025, 37 N-day vulnerabilities and 52 zero-day vulnerabilities specifically targeted security and perimeter software.

VulnerabilitiesN-Day VulnerabilitiesZero-Day VulnerabilitiesSecurity SoftwarePerimeter Software

Average Time to Exploit (TTE) declines year-by-year: 745 days in 2020, 518 days in 2021, 405 days in 2022, 296 days in 2023, 115 days in 2024, and 44 days in 2025.

Vulnerability ManagementAverage Time To ExploitTTE

Vulnerability disclosures increased by 12% between January 2025 and December 2025.

VulnerabilitiesVulnerability Disclosures

AI-related illicit discussions increased by 1,500% between November and December 2025.

Artificial IntelligenceCybercrimeThreat Actors

Ransomware incidents increased by 53% between January 2025 and December 2025.

Ransomware

3.3 billion compromised credentials and cloud tokens make identity the primary exploit vector.

IdentityCompromised CredentialsCompromised Cloud Tokens

Over 11.1 million machines were infected with infostealers in 2025.

MalwareInfostealers

The theft of credentials via information-stealing malware has skyrocketed by 800% since the start of 2025.

InfostealerCredentials

Vulnerability disclosures increased by 246% since the start of 2025.

Vulnerability disclosures

Ransomware has risen by 179% since the start of 2025.

Ransomware

Over the past four months, data breaches surged by 235%.

Data breaches

Unauthorized access accounted for nearly 78% of all reported data breach incidents

Data breaches

The Lazarus threat actor group has over 40 distinct designations across the industry.

Threat ActorsAttributionLazarus

Exploit weaponization can occur in under 24 hours.

ExploitationExploit Weaponization

Of the 65 CVEs discussed by the BlackBasta ransomware group, 54 are Known Exploited Vulnerabilities (KEVs).

RansomwareVulnerabilitiesBlackBastaCVEs

Most large organizations have accurate inventories for only about 25% of their total assets.

Asset ManagementEnterprise SecurityAsset Inventory