Cybercriminal activity exploiting basic security gaps rose 56% year-over-year, reaching 6.29 billion attacks on website vulnerabilities in 2025. IBM’s 2026 X-Force Threat Index attributes the acceleration to AI-enabled tools that streamline vulnerability discovery and weaponization.

A global increase in cyberattacks focused on enterprise website and application vulnerabilities was documented in 2025, with the total number of attempts climbing to 6.29 billion, a 56% rise from the 4 billion recorded in 2024 [1][2]. The data were presented in IBM’s 2026 X-Force Threat Index released on February 25, 2026, and corroborated by the Indusface State of Application Security Report 2026 [1][3]. The reports aggregate observations from security operations centers, threat intelligence feeds, and vulnerability scanning services worldwide, without specifying a single geographic region.

The findings involve cybersecurity researchers and analysts at IBM and Indusface, who compiled the statistics from their respective threat-intelligence platforms [2][3]. According to the IBM release, attackers employed artificial-intelligence (AI) tools to automate the identification, weaponization, and exploitation of known and newly discovered flaws in web applications [2]. The Indusface report adds that the surge reflects a broader trend of adversaries leveraging AI to increase the speed and scale of attacks across enterprise environments [1][3].

Scale of Vulnerability Exploitation in 2025

IBM’s threat index indicates that basic security gaps—such as unpatched software libraries, misconfigured servers, and outdated content-management systems—were the primary entry points for the 6.29 billion attacks recorded in 2025 [2]. The index tracks attempts to exploit common web-application vulnerabilities, including SQL injection, cross-site scripting (XSS), and remote code execution, across a sample of more than 150,000 enterprise domains [2].

Indusface’s State of Application Security Report 2026 provides a parallel data set, noting that the volume of attacks targeting website vulnerabilities rose from 4 billion in 2024 to 6.29 billion in 2025, confirming the 56% year-over-year increase [1][3]. The report attributes the growth to a higher frequency of automated scanning tools that locate exposed endpoints, as well as to the increased adoption of cloud-based services that expand the attack surface for enterprises [3].

Both reports emphasize that the rise is not confined to any single industry. Financial services, healthcare, retail, and manufacturing sectors all reported comparable upticks in attempted exploits, reflecting the universal reliance on web-facing applications for customer interaction and internal processes [2][3].

The report attributes the growth to a higher frequency of automated scanning tools that locate exposed endpoints, as well as to the increased adoption of cloud-based services that expand the attack surface for enterprises [3].

AI Tools Accelerating Attack Cadence

IBM’s February 2026 release highlights that AI-driven automation enabled threat actors to reduce the time required to locate and weaponize vulnerabilities from weeks to hours [2]. Machine-learning models trained on public vulnerability databases can generate exploit code automatically, allowing attackers to launch large-scale campaigns with minimal manual intervention [2].

You may also like

News

Rajasthan Government Schools Lose Over 8 Lakh Students in Two Academic Years

Rajasthan’s total school enrollment fell by over 8 lakh students in two years, with government schools losing more than 9.3 lakh.

Read More →

Indusface’s analysis corroborates the role of AI, noting that generative-AI platforms are being used to craft phishing pages, obfuscate malicious payloads, and bypass traditional signature-based defenses [1][3]. The reports document a measurable increase in the proportion of attacks that incorporate AI-generated code, rising from 12% of total attempts in 2024 to 27% in 2025 [1][2].

The convergence of AI and automated scanning tools has also expanded the geographic distribution of attacks. Threat intelligence feeds observed a broader dispersion of source IP addresses, indicating that AI-enabled botnets can launch coordinated assaults from multiple regions simultaneously [2].

Impact on Enterprises and Website Owners

The documented surge in vulnerability-focused attacks presents immediate risk to organizations that maintain public-facing web applications. The reports estimate that successful exploitation can lead to data breaches affecting an average of 1.4 million records per incident, with associated remediation costs averaging $4.2 million per breach [2][3].

Enterprises are advised to prioritize rapid patch management, continuous application-security testing, and the deployment of AI-enhanced defensive solutions that can detect anomalous exploitation patterns in real time [2][3]. The IBM index recommends integrating threat-intelligence feeds with security-information-and-event-management (SIEM) platforms to improve visibility into emerging exploit techniques [2].

Indusface’s report suggests that organizations adopting automated remediation workflows reduced successful exploit rates by up to 38% compared with those relying on manual patch cycles [1][3].

For website owners, the findings underscore the necessity of regular vulnerability assessments and the implementation of web-application firewalls (WAFs) configured to block known exploit signatures. Indusface’s report suggests that organizations adopting automated remediation workflows reduced successful exploit rates by up to 38% compared with those relying on manual patch cycles [1][3].

Immediate Steps for Stakeholders

The data released by IBM and Indusface indicate that the heightened attack volume is already affecting operational continuity for many enterprises. Security teams are urged to inventory all web-exposed assets, verify that software components are up to date, and apply security patches within the vendor-specified remediation windows [2][3].

You may also like

News

EU AI and Robotics Investment Surges to $9.2 Billion in Early 2026

European AI startups secured more than $9.2 billion in venture funding during the first two months of 2026, pushing AI to represent 31% of all…

Read More →

Education and training programs for developers are also highlighted as a preventive measure. The reports note that code-review practices that incorporate static-application-security-testing (SAST) tools can identify vulnerable code before deployment, reducing the pool of exploitable entry points [1][3].

By addressing basic security gaps and leveraging AI-powered defensive technologies, organizations can mitigate the risk of being targeted by the high-volume attack campaigns documented in the 2025 data [2][3].

Key Facts

What: Cyberattacks exploiting website vulnerabilities reached 6.29 billion attempts in 2025, a 56% increase from 2024.

By addressing basic security gaps and leveraging AI-powered defensive technologies, organizations can mitigate the risk of being targeted by the high-volume attack campaigns documented in the 2025 data [2][3].

When: Data reported in IBM’s 2026 X-Force Threat Index (February 25, 2026) and Indusface State of Application Security Report 2026.

Impact: Enterprises and website owners face heightened risk of data breaches and financial loss; immediate patching and AI-enhanced defenses are recommended.

You may also like

News

CBSE Delays Release of Class 10 2026 Results, Affecting Over 660,000 Students

CBSE has not set a date for the Class 10 2026 second‑board results, leaving more than 660,000 candidates in a waiting period that is raising stress…

Read More →

Sources

• IBM 2026 X-Force Threat Index: AI-Driven Attacks are Escalating as Basic Security Gaps Leave Enterprises Exposed – IBM Newsroom
• 46 Vulnerability Statistics 2026: Key Trends in Discovery, Exploitation … – Security Boulevard
• 46 Vulnerability Statistics 2026: Key Trends & Data – Indusface Blog
• Cybersecurity Trends 2026 – IBM Think