Changing the tide: Reflections on threat data from 2024
Summary: Cisco Talos reported that CVEs rose from 29,166 in 2023 to 40,289 in 2024, a 38% increase, while CISA's known exploited vulnerabilities held nearly flat at 186 in 2024 versus 187 in 2023. Talos also found a 36% increase in critical vulnerabilities scored 9-10, and its incident response data showed exploiting public-facing applications and valid accounts as the dominant initial access vectors.
Key Takeaway: CVE volume grew 38% while the exploited-vulnerability count barely moved, so the gap between what gets published and what gets attacked is where prioritization decisions get made. Talos's own incident data points to public-facing applications and valid accounts as the ways attackers got in, and free support for Windows 10 ends October 14, 2025.
Read the original at Cisco Talos ↗
- Topics
- Detection & Response
- Related
- YARA-X 1.23.0 Release, (Sun, Nov 15th) Cyber Risks · Nov 15, 2026Inside Falcon AI Gateway: One Control Point for AI Traffic Cyber Risks · Nov 13, 2026Macfinger Click Fix campaign sends Down TheDRAIN infostealer for macOS, (Fri, Nov 13th) Cyber Risks · Nov 13, 2026