Verizon DBIR 2025: Edge KEVs Are Increasingly Left Unpatched — and More Often Exploited in Breaches
Summary: The 2025 Verizon DBIR reports that exploitation of edge vulnerabilities in breaches has surged eightfold, yet nearly one in three edge KEVs remain fully unpatched despite being on CISA's Known Exploited Vulnerabilities catalog. GreyNoise research adds that old edge vulnerabilities are resurging, with half of the top exploited resurgent vulnerabilities affecting edge assets and 70% of Black Swans affecting the edge.
Key Takeaway: Nearly one in three edge KEVs sits unpatched even though it is already flagged as exploited in the wild, and attackers are returning to older edge flaws that static patching models built on KEV, CVSS, and EPSS alone will not surface as active again.
Read the original at GreyNoise Blog ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026