“Specifically, of the 138 vulnerabilities disclosed as actively exploited in 2023, Mandiant says 97 (70.3%) were leveraged as zero-days.”
Time to exploit fell from 63 days in 2018-2019 to 32 days in 2021-2022 and now five. A record 56 vendors had actively exploited flaws, up from 44. Monthly patch cycles were built for the 63-day world. Attackers now move faster than most change-approval meetings.