Rapid7 Reports Surge in Vulnerabilities and Exploitation Tactics in Q2 2026

Rapid7's Q2 2026 Threat Landscape Report documents a sharp rise in high- and critical-severity CVEs (8,539 in Q2, doubling year-over-year), widespread automated exploitation with 62% of exploited vulnerabilities requiring no user interaction, and active targeting of critical infrastructure (healthcare, finance) by state-aligned actors from Iran, North Korea, and Russia; it urges prioritizing realistically exploitable exposures and adopting preemptive security measures.