The Annual Vulnerability Intelligence Report: 2022 Edition

Widespread attacks and zero-day exploitation hit all-time highs in 2021, pushing security teams around the world to their limits and beyond.

The attack landscape in 2022 was slightly more nuanced, as adversaries evolved operations and leveraged both new and known vulnerabilities to accomplish their goals. In our annual vulnerability intelligence report, we analyzed 50 of 2022’s most notable vulnerabilities and attacks to highlight exploitation trends and help security practitioners prioritize.

Here’s what we found:

Despite decreases, 2022 was still a year of serious risk. Net-new widespread threats were down 15% from their 2021 highs, but 28 widely exploited vulnerabilities still dominated our 2022 dataset.
Attackers are gearing up faster and faster. 56% of the vulnerabilities in our report were exploited within seven days — a 12% increase YoY and an 87% rise over 2020.
Zero-day attacks are down slightly, but we’re not out of the woods. Zero-day exploits are down 9% from 2021 but have still plateaued at a high rate, which keeps the gap between vulnerability disclosure and exploitation small.

Download the report to get our full analysis.

Widespread attacks and zero-day exploitation hit all-time highs in 2021, pushing security teams around the world to their limits and beyond.

Here’s what we found:

Despite decreases, 2022 was still a year of serious risk. Net-new widespread threats were down 15% from their 2021 highs, but 28 widely exploited vulnerabilities still dominated our 2022 dataset.
Attackers are gearing up faster and faster. 56% of the vulnerabilities in our report were exploited within seven days — a 12% increase YoY and an 87% rise over 2020.
Zero-day attacks are down slightly, but we’re not out of the woods. Zero-day exploits are down 9% from 2021 but have still plateaued at a high rate, which keeps the gap between vulnerability disclosure and exploitation small.

Download the report to get our full analysis.