8,539 reasons to rethink how vulnerabilities get patched

Rapid7's Q2 2026 Threat Landscape Report warns that vulnerability disclosures have doubled year-over-year and public proof-of-concept code is rising, accelerating exploitation; 62% of newly exploited flaws were network-exploitable with no authentication or user interaction. The report calls attention to internet-facing systems (VPNs, RDP, web servers), growing underground exploit/access marketplaces, social engineering in collaboration platforms, sustained state-aligned campaigns (Iran, North Korea, Russia), and significant ransomware activity—urging asset inventory, triage based on reachability, MFA, and prioritized patching.