A vulnerability that meets all four criteria would need to be fixed within three days, for instance.

Verizon’s annual Data Breach Investigations Report uncovered a surge of exploited vulnerabilities, and a growing lack of critical defect remediation industrywide.

The vulnerability threat intelligence firm’s research reinforces a slew of recent reports warning about increased exploits in 2024.

Verizon’s 2025 Data Breach Investigations Report noted a 37% increase in ransomware attacks and a 34% increase in exploited vulnerabilities.

Verizon’s annual data breach report identified the MOVEit hack as the “poster child” of the phenomenon.

Nation-state attackers do more financial damage than one might expect, the Cyentia Institute study found.

Email addresses and phone numbers may be exposed as well.

Verizon’s DBIR has emerged in the past generation as a reliable way of assessing corporate cybersecurity threats and defenses.

The figures again demonstrate how, despite an industrywide focus on technology, many breaches require human trust to be successful.

The takeaway from the 10th annual Verizon Data Breach Investigations Report is depressingly familiar: Of the 1,935 breaches analyzed 88 percent were accomplished using a familiar list…