Verizon's 17th annual DBIR analyzing 30,458 security incidents and 10,626 confirmed breaches. Key finding: exploitation of vulnerabilities as initial breach access increased 180% year-over-year, accounting for 14% of all breaches, driven primarily by ransomware actors targeting unpatched systems.

od Verizon • 2024-05-01

BeyondTrust's 12th annual analysis of Microsoft vulnerabilities reveals a record 1,360 total vulnerabilities disclosed in 2024 - an 11% increase from the previous peak. Elevation of Privilege vulnerabilities comprised 40% of all reported flaws, emphasizing the critical importance of timely patching.

od BeyondTrust • 2025-04-15

Ponemon Institute survey finding that 60% of breach victims were compromised due to known vulnerabilities where patches were available but not applied. Additionally, 62% were unaware their organizations were vulnerable prior to the breach, and 52% cite manual processes as a disadvantage.

od Ponemon Institute / ServiceNow • 2019-10-09

CISA's authoritative catalog of vulnerabilities actively exploited in the wild. Organizations are strongly recommended to prioritize remediation of these catalogued vulnerabilities, with median remediation time for 50% of critical CISA KEV vulnerabilities being 55 days after patches become available.

od CISA • 2025-02-11