STATE OF VULNERABILITIES 2024

Vulnerability trends across industries and the Synack Red Team’s perspectives on AI

Annual report answers how organizations address critical risks

There’s no such thing as a “good” vulnerability. With organizations facing growing threats like zero days, expanding attack surfaces and run-of-the-mill XSS, the prioritization of flaws can get out of hand. However, tackling those “crown jewel” assets and addressing critical to high-severity vulnerabilities first can help teams reduce time-to-remediation.

This report looks at five industries (healthcare, financial services, U.S. federal government, technology and manufacturing) and their most common vulnerabilities to see how they stack up against each other.

There is good news to report and some troubling findings that organizations should be mindful of. Read the report to learn:

• Which vulnerabilities continue to plague security teams
• Which industries saw the greatest average number of exposed subdomains, web apps and IP addresses
• Strategies to move the needle with vulnerability management