{"id":208971,"date":"2026-01-29T08:53:00","date_gmt":"2026-01-29T13:53:00","guid":{"rendered":"https:\/\/news-you-need.com\/index.php\/2026\/01\/29\/vulnerability-exploits-now-dominate-intrusions-the-register\/"},"modified":"2026-02-01T22:50:12","modified_gmt":"2026-02-02T03:50:12","slug":"vulnerability-exploits-now-dominate-intrusions-the-register","status":"publish","type":"post","link":"https:\/\/news-you-need.com\/index.php\/2026\/01\/29\/vulnerability-exploits-now-dominate-intrusions-the-register\/","title":{"rendered":"Vulnerability exploits now dominate intrusions \u2022 The Register"},"content":{"rendered":"

Vulnerability exploits now dominate intrusions \u2022 The Register<\/a><\/p>\n

https:\/\/www.theregister.com\/2026\/01\/29\/faster_patching_please_cry_infoseccers\/<\/a><\/p>\n

Publish Date: 2026-01-29 08:53:00<\/a><\/p>\n

Source Domain: www.theregister.com<\/a><\/p>\n

What good is a fix if you don’t use it? Experts are urging security teams to patch promptly as vulnerability exploits now account for the majority of intrusions, according to the latest figures.<\/p>\n

Cisco Talos said exploited flaws were behind nearly 40 percent of all intrusions in Q4 2025, and the speed at which attackers were harnessing those weaknesses should serve as a wake-up call for defenders.<\/p>\n

This marks the second quarter in a row that exploits led the charge for initial access, but represented a drop from Q3’s rate of 62 percent, which was driven largely by widespread ToolShell attacks.<\/p>\n

More recently, the team pointed to the Oracle EBS and React2Shell vulnerabilities as examples of two high-profile vectors that continued to fuel the trend, both of which were taken up by attackers within hours of disclosure.<\/p>\n

Talos stated in its report: “In both cases, exploitation activity occurred around the time the vulnerability became public, demonstrating actors’ speed in capitalizing on these opportunities as well as the inherent risks of internet-facing enterprise applications and default deployments embedded in widely used frameworks.”<\/p>\n

The Register reported at the time that a functional proof-of-concept exploit for React2Shell began circulating online within 30 hours of disclosure, for example.<\/p>\n

Likewise, AWS said Chinese state-backed attackers were exploiting the maximum-severity bug “within hours or days of disclosure.”<\/p>\n

Whether organizations heed this warning is another matter, however. Patching systems, especially in large organizations, can be a painful process, but according to a BitSight analysis in 2024, private sector admins are taking months, not hours, to patch the most serious flaws.<\/p>\n

Unsurprisingly, phishing was also among the most common ways in which attackers gained access to a victim’s network, coming in…<\/p>\n

Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Vulnerability exploits now dominate intrusions \u2022 The Register https:\/\/www.theregister.com\/2026\/01\/29\/faster_patching_please_cry_infoseccers\/ Publish Date: 2026-01-29 08:53:00 Source Domain:…<\/p>\n","protected":false},"author":1,"featured_media":208972,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/regmedia.co.uk\/2023\/03\/14\/patch_shutterstock.jpg","fifu_image_alt":"","footnotes":""},"categories":[15],"tags":[31,25,27],"class_list":["post-208971","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-exploit","tag-phishing","tag-vulnerability"],"_links":{"self":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/208971"}],"collection":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=208971"}],"version-history":[{"count":1,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/208971\/revisions"}],"predecessor-version":[{"id":208973,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/208971\/revisions\/208973"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/208972"}],"wp:attachment":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=208971"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=208971"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=208971"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}