Kaspersky Report: Vulnerabilities Are Exploding, and Attackers Are Adapting

According to Kaspersky’s Q2 2025 vulnerability analysis, the number of registered vulnerabilities is rising year on year, with exploitation in the wild increasing alongside it. The findings show attackers continue to rely on long‑standing flaws in Windows, Linux and WinRAR while also adapting to emerging technologies such as AI frameworks and low‑code platforms.

The report highlights a steep rise in CVE registrations this year: around 2,600 vulnerabilities were registered as of the beginning of 2024, whereas in January 2025 the figure exceeded 4,000. Critical CVEs (CVSS > 8.9) are also on the rise, with the data for the first two quarters of 2025 showing a significant increase compared to previous years.

The report also details popular C2 frameworks used by attackers in 2025—Sliver, Metasploit, Havoc and Brute Ratel C4—and notes these tools often come with exploits ready to deploy, enabling automated post‑exploitation activity.