CVEs on the Rise: 2024 Sees a Surge in Exploits Amid Industry Buzz
In 2024, a whopping 768 CVEs were reported as exploited in the wild, marking a 20% rise from the previous year. Despite the zero-day buzz, exploitation can strike anytime in a vulnerability’s lifecycle. Industry events and new sources like Shadowserver Foundation have spiced up the exploit report scene.

Hot Take:
2024 must have been the year hackers decided to add a little spice to their life with a 20% increase in exploited CVEs. But hey, who doesn’t love a good plot twist where zero-days are on a slight decline? It’s like hackers are trying to keep us on our toes by exploiting vulnerabilities across the calendar just for fun.
Key Points:
- 768 CVEs were reported as exploited in 2024, a 20% increase from the previous year.
- 23.6% of these were zero-day vulnerabilities, a slight decrease from 2023.
- 50% of CVEs were exploited within 192 days of public disclosure.
- Exploit reports spiked during industry events like the RSA Conference.
- New threat intelligence sources, like the Shadowserver Foundation, contributed to the increase in reports.
Already a member? Log in here