How Low Can You Go? An Analysis of 2023 Time-to-Exploit Trends

This analysis highlights a shift in exploitation trends: zero-day exploitation remains prevalent while n-day exploitation occurs more rapidly after disclosure, driving average time-to-exploit down from roughly 63 days to about 5 days. The report stresses that exploit releases and media attention are not reliable predictors of exploitation, and recommends prioritizing detection and response, patching prioritization, segmented architectures, and access controls to reduce impact as attackers continue to expand targets and shorten timelines.