What exploited vulnerabilities have in common: A data-driven analysis of real-world attacks

In this article 1. Classifying the vulnerability landscape 2. Vulnerabilities exploited in the wild 3. Where defenders should focus 1. Patching is slow, while exploitation is fast 2. Impact, exposure and where to focus 3. Next in line 4. How Microsoft Security helps defenders act 5. References 6...

Exploits and vulnerabilities in Q2 2026

The vulnerability landscape shifted significantly in Q2 2026. First, the number of registered CVEs reached an unprecedented level. This is driven primarily by the widespread adoption of AI, both for application development and search for security flaws. This resulted in entire new classes of...

Ransomware Reality Check: Deciphering Priorities in a Sea of Cyber Extortion

Welcome to a critical exploration of the 2023 Cyber Vulnerability Landscape, with a specific focus on the escalating threat of ransomware. I have previously shared the broader results we found in evaluating the 2023 threat landscape; this is now a deeper dive into what the data reveals specifical...