vulnerability statistics

Vulnerability statistics are easy to inflate because the biggest number, the raw count of published vulnerabilities, is also the least useful on its own. A record 48,244 vulnerabilities were disclosed in 2025, yet only a small fraction were ever exploited, and confirmed exploitation is concentrated in a tracked catalog far smaller than the disclosure total. […]

Small business cybersecurity statistics are quoted constantly and sourced carelessly, which is how a viral claim like “60% of small businesses close within six months of an attack” outlived the organization that disowned it. This page collects the numbers that survive a source check, separates confirmed incident data from surveys, and names the ones to […]