High-Severity Flaws Exploited in Three Days as Ransomware Dominates Q3: Rapid7
High severity flaws are exploited faster; ransomware remains the dominant threat; the US is the world’s most targeted country, and attacks increasingly involve the use of AI (but largely manually rather than autonomously).
Rapid7’s threat analysis for Q3, 2026 adds color to these basic details of the current threat landscape.
During Q3, high severity vulnerabilities were exploited within an average of three days from disclosure, with 71% exploited during the first seven days. Seventy-nine percent of these vulnerabilities are classed by Rapid7 as ‘holy grail’ flaws (that is, remote and requiring neither credentials nor local user involvement).
Ransomware remains a primary threat throughout the world. The most targeted sectors in Q3 were business services, manufacturing, and healthcare. The US was the most targeted nation (60% of attacks), followed by Germany (7%), Italy (5%) and Canada (5%).
The most successful ransomware groups were The Gentlemen (342 claimed incidents) and Qilin (339)....
Copyright of this story solely belongs to www.securityweek.com. To see the full text click HERE
