High-Severity Flaws Exploited in Three Days as Ransomware Dominates Q3: Rapid7

Rapid7's Q3 findings reveal that threat actors are exploiting high-severity vulnerabilities within an average of just three days of disclosure, with 71% targeted within the first week — leaving virtually no margin for slow or manual patching processes. Ransomware operators are the primary beneficiaries of this speed advantage, hitting US-based organizations in business services, manufacturing, and healthcare hardest. This underscores a fundamental gap between the pace of vulnerability disclosure and organizations' ability to assess, prioritize, and remediate exposures at scale. When patch cycles run on weekly or monthly schedules, attackers operating on a 72-hour timeline will almost always win. Organizations must treat critical vulnerability disclosure as an emergency event requiring immediate operational response, not a routine IT task.