The Attack Cycle is Accelerating: Announcing the Rapid7 2026 Global Threat Landscape Report

Rapid7 published its 2026 Global Threat Landscape findings showing exploitation of newly disclosed high-severity (CVSS 7–10) vulnerabilities doubled year-over-year and that the median time from disclosure to inclusion on CISA’s Known Exploited Vulnerabilities list dropped to ~5 days — emphasizing that adversaries are weaponizing exposure at machine speed. Rapid7 MDR is tracking an uptick in Microsoft Teams phishing where attackers impersonate internal IT to coerce users into launching Quick Assist, granting remote access for malware deployment, data exfiltration, and lateral movement. The Meta