Rapid7: High-Severity Flaws Exploited in Three Days, Ransomware Dominates Q3

Rapid7's Q3 2026 threat report says high-severity vulnerabilities were exploited within an average of three days of disclosure, with 71% hit in the first week. Ransomware remains the top threat, led by The Gentlemen (342 incidents) and Qilin (339), while the US accounted for 60% of attacks. AI appeared as an operational component in only 8% of tracked incidents.

• 71% of high-severity flaws exploited within seven days of disclosure
• The Gentlemen claimed 342 incidents, Qilin 339, INC Ransom 99
• US hit by 60% of attacks; Germany 7%, Italy and Canada 5% each
• AI was an operational component in 8% of incidents, no fully autonomous attacks