CrowdStrike report: "Exploitation of vulnerabilities concentrated within 48 hours"

CrowdStrike’s 2026 Threat Hunting Report tracked more than 290 attacker groups between July 2025 and June 2026.

Attacks increasingly targeted AI infrastructure, LLM access, cloud environments, and software supply chains.

In the first half of the year, 88% of vulnerabilities were exploited within 48 hours of disclosure, sharply shrinking response time.

China-linked groups used exploits released the day after disclosure to attack within 24 hours, while malicious npm packages dominated repository threats.