Patch windows collapse as time-to-exploit accelerates

The time between vulnerability disclosure and exploitation is shrinking dramatically, putting pressure on security teams to accelerate their patching processes. A significant increase in exploitation of high-severity vulnerabilities has been observed, with a 105% rise in confirmed cases in 2025 compared to the previous year, reaching 146 instances¹. The window for patching has collapsed, with the median time to inclusion in the CISA Known Exploited Vulnerabilities list dropping to just 5 days, and the mean time-to-exploit decreasing to 28 days. This compressed timeline underscores the need for security teams to prioritize patching and implement more efficient vulnerability management practices. The rapid acceleration of exploitation highlights the importance of proactive measures to mitigate potential threats, making it essential for practitioners to reevaluate their patching strategies to stay ahead of emerging vulnerabilities.