Security teams urged to center defense on the flaw profile attackers target most

Summary

Rapid7's Quarterly Threat Landscape report found 43 newly exploited vulnerabilities in Q3 2026, up 19% year on year, while new high-severity CVEs rated 7 through 10 rose 133%. Attackers exploited select high-severity flaws within an average of three days, and nearly 80% of exploited flaws could be reached remotely with no login and no user click. AI showed up as an operational component in about 8% of the attacks Rapid7 tracked.