08/10/2026
"For the first time in 19 years, vulnerability exploitation has overtaken stolen credentials as the leading way in, at 31% of all breaches. Only 26% of known exploited vulnerabilities were fully remediated, and the median fix took 43 days*
Patch what attackers are actually exploiting
- Prioritise the CISA Known Exploited Vulnerabilities catalogue over raw CVSS scores
- Automate patching for internet-facing assets first
- Measure and report your time-to-remediate as a board metric
*Verizon 2026 Data Breach Investigations Report.
"