THANK YOU FOR SUBSCRIBING
Enterprise Security Magazine | Monday, March 06, 2023
Rapid7's Vulnerability Intelligence Report finds more than an 87 percent increase in first-week exploitation since 2020.
FREMONT, CA: "Rapid7's team of vulnerability researchers works around the clock to thoroughly investigate and provide critical context into emergent threats," said Caitlin Condon, Rapid7 vulnerability research manager and lead Vulnerability Intelligence Report author. "We produce the annual Vulnerability Intelligence Report to help organizations understand attack trends and proactively address both the unique and shared threats they face."
One of the leaders in cloud risk and threat detection, Rapid7, revealed its new Vulnerability Intelligence Report. The report analyzed about 50 high-impact cyberattacks and security vulnerabilities in 2022.
Stay ahead of the industry with exclusive feature stories on the top companies, expert insights and the latest news delivered straight to your inbox. Subscribe today.
Providing a framework to understand new security threats, Rapid7's 2022 Vulnerability Intelligence Report examines attacker use cases, highlights exploitation trends, and examines new vulnerabilities. An important finding of this report is that attackers are finding and exploiting vulnerabilities faster than ever. The median time to exploit these vulnerabilities was one day in 2022, an increase of 12 percent over 2021 and 87 percent over 2020.
According to the Rapid7 report, there was also a 33% reduction in the number of vulnerabilities exploited during ransomware attacks from 2021 to 2022. Condon suggests that this decrease may be due to reduced need for new vulnerabilities in ransomware operations. Still, other factors, including lower reporting of ransomware incidents, could also be at play.
The security, IT, and other teams involved in vulnerability management and risk reduction operate in high-stakes, high-urgency environments where separating signal from noise is essential to informed decision-making. Information security professionals must often transform untested research artifacts and vague descriptions into actionable intelligence when a new threat emerges.
"The ransomware ecosystem and the cybercrime economy have continued to mature and evolve," said Condon. "We saw many more ransomware families actively compromising organizations in 2022, which naturally creates challenges for threat tracking and reporting."
More in News