The Attack Cycle is Accelerating: Announcing the Rapid7 2026 Global Threat Landscape Report
2026-03-19T07:23:42Z•7de51437ef56d106aca035e530cf60873453801e8cbf35cba2d14b0c56c0325a
AI-driven-threatsCISA-KEVMDRexploit-weaponizationidentity-abuseleakixmetasploitmicrosoft-teamspayload-packerphishingquick-assistransomwarerceremote-accesssocial-engineeringthreat-landscapevulnerability-managementzero-day
What happened
Rapid7 publishes a broad March 2026 briefing showing an accelerating attack cycle: confirmed exploitation of newly disclosed CVSS 7–10 vulnerabilities rose 105% in 2025 and the median time from publication to inclusion on CISA's KEV list fell from 8.5 to 5.0 days. Rapid7 warns organizations that reactive vulnerability programs are increasingly insufficient. Observed operational trends include AI-driven tradecraft, faster weaponization of high-impact flaws, identity abuse, and ransomware. Rapid7 MDR is tracking Microsoft Teams phishing campaigns where actors impersonate IT and socially engineer
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- rapid7_blog
- Record identifier
- 7de51437ef56d106aca035e530cf60873453801e8cbf35cba2d14b0c56c0325a
- Enrichment time
- 2026-03-19T07:23:42Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.