Grey Noise 2025 Mass Internet Exploitation Report

Summary: GreyNoise's 2025 Mass Internet Exploitation Report states that 40% of exploited CVEs in 2024 were at least four years old, with some dating back to the 1990s. It also reports that attackers target zero-days within hours of disclosure while continuing to exploit old vulnerabilities years, sometimes decades, after disclosure.
Bottom line: Four in ten vulnerabilities exploited in 2024 were at least four years old, some from the 1990s - so the exposure a security leader should sit with is the aging estate still reachable from the internet, not just the newest CVE.

Read the original at GreyNoise Blog ↗