Rapid7 Inc (NASDAQ: RPD) released its Quarterly Threat Landscape Report on August 18, 2026, revealing that 62% of newly exploited vulnerabilities in the second quarter were "holy grail" flaws that could be exploited over a network without authentication or user interaction. The findings highlight a shift toward automated attack chains, where the window between vulnerability disclosure and active exploitation has collapsed.

High and critical vulnerability disclosures doubled year-over-year to 8,539, while newly exploited vulnerabilities jumped by up to 40%. This surge in exposure is compounded by an increase in publicly available proof-of-concept (PoC) code, which rose 12% quarter-over-quarter and 76% year-over-year, expanding the pool of tools attackers can quickly turn into real-world attacks.

What the Numbers Show

The data reveals a divergence between disclosure volume and exploitability. While high and critical disclosures doubled year-over-year, the proportion of these flaws that are zero-click (62%) suggests that traditional patching models based on static severity scores are increasingly ineffective. The simultaneous 247% year-over-year increase in disclosures involving missing authentication (from 45 to 156) indicates that attackers are prioritizing low-effort entry points over complex exploits.

Christiaan Beek, Vice President at Rapid7 Labs, stated that security teams relying on periodic patch cycles are "subsidizing the attackers' R&D." He emphasized moving beyond static CVSS scores to focus on reachable and exploitable exposures.

Ransomware and Geopolitical Threats

Ransomware activity remained concentrated but expanded geographically. The United States accounted for 881 listed ransomware victims, approximately nine times the 99 recorded in Germany. India and Thailand entered the top 10 countries for victims, indicating that ransomware affiliate programs are extending beyond historically prominent U.S. and European targets.

State-aligned campaigns from Iran, North Korea, and Russia targeted critical infrastructure and enterprise sectors. Key tactics included exploiting SOHO edge routers for DNS hijacking and actively targeting operational technology and industrial control systems.

Executive security leaders are significantly more concerned about artificial intelligence governance than frontline practitioners, according to new research commissioned by Rapid7 (NASDAQ: RPD) and conducted by Omdia. The global survey of 500 security professionals found that executives are 1.6 times more likely to report being highly concerned about how AI vendors handle organizational security data compared to operational security managers.

The study indicates that while AI has crossed the threshold for operational adoption, attention is shifting toward transparency, accountability, and governance. Among organizations already using AI in production, nearly all respondents reported positive operational results, reinforcing AI’s status as a core component of modern security operations.

Key Findings

The survey, conducted between February 10 and March 3, 2026, revealed widespread confidence in AI’s operational value alongside growing executive scrutiny:

• 97% of respondents report AI is having a positive impact on security operations.
• 98% of organizations using AI say it helps reduce alert fatigue.
• 92% agree human oversight remains essential, viewing AI as augmenting rather than replacing analysts.
• 86% believe managed detection and response (MDR) providers integrating AI offer an advantage over traditional services.

What the Numbers Show

The data reveals a distinct divergence between operational satisfaction and executive risk perception. While 97% of respondents confirm positive operational impacts and 92% affirm the necessity of human oversight, executive leaders remain 1.6 times more likely to express strong concern regarding AI governance. This suggests that operational teams view AI primarily through the lens of productivity and efficiency, whereas leadership focuses on data privacy, transparency, and accountability. The gap implies that successful AI deployment now requires aligning operational gains with robust governance frameworks to satisfy board-level risk requirements.

Governance as a Differentiator

Dejan Decklich, Chief Product and Technology Officer at Rapid7, noted that the conversation has shifted from whether AI belongs in the security operations center (SOC) to how it is governed responsibly. Organizations expect transparency and accountability while leveraging AI to accelerate investigations and reduce repetitive work.

Dave Gruber, Principal Analyst at Omdia, added that the next phase of adoption will be defined by trust. Security leaders increasingly seek solutions that combine AI-driven efficiency with transparency and human expertise. The full report, AI, SOC Transformation, and How AI-Enabled MDR Providers Are Helping Accelerate Velocity, is available on Rapid7’s website.