N-Day Vulnerability Trends: The Shrinking Window of Exposure and the Rise of “Turn-Key” Exploitation

This Flashpoint intelligence brief describes a sharp rise in exploitation of known (N-day) vulnerabilities, reporting that N-days represent over 80% of tracked KEVs and that average Time to Exploit fell from 745 days in 2020 to 44 days in 2025; adversaries are rapidly weaponizing public PoCs and using internet-wide scanners to conduct mass exploitation, with defensive infrastructure and perimeter/security software disproportionately targeted and nation-state activity (notably China) and criminal groups like BlackBasta implicated in leveraging these N-days.