Public data on how fast new vulnerabilities appear, with an explanation of what it means for a company. Last updated 21/10/2026.
Worldwide · last 12 months
Vulnerabilities are being published faster and faster.
New public vulnerabilities per month
3.4× more in a year
100,510total in 12 months
Oct 25NovDecJan 26FebMarAprMayJunJulAugSeptOct
What it meansEach number is a known flaw in some piece of software: a website platform, a plugin, a server or a service. The more flaws are published, the more often your website needs updating too. The current month is drawn with a dashed line because it isn't over yet.
Source: NVD (US National Vulnerability Database). Use of the data does not imply NVD endorsement.
Vulnerabilities used in attacks, added per month
These are already being used
308added in 12 months
Oct 25NovDecJan 26FebMarAprMayJunJulAugSeptOct
What it meansNot every flaw gets exploited. These are flaws that attackers have been confirmed to be using right now. If one of them is in your software, it needs fixing immediately, not in the next development cycle.
Source: CISA Known Exploited Vulnerabilities catalog (CC0). We do not represent CISA.
Vulnerabilities used in attacks per year (worldwide)
2023187
2024186
2025245
2026270*
* 2026 as of 21/10/2026; the year isn't over yet. Source: CISA KEV catalog.
Threat landscape · Estonia
The numbers behind the risk
Cyber incidents with impact in Estonia have tripled in two years, and fraudsters took €29M from people in 2025. Scams increasingly arrive by phone and in fluent Estonian.
Critical
10,185
Incidents with impact
Registered in 2025, 3.1× the 2023 figure (3,314)
Critical
29M €
Lost to fraud
2025, three times more than the year before
High
756
DDoS attacks
A record in 2025, over a third more than 2024
High
2,809
Phishing incidents
Phishing incidents with impact in 2025
Incidents with impact per year3.1× since 2023
2022
2,672
2023
3,314
2024
6,515
2025
10,185
Source: RIA (Estonian Information System Authority) Cybersecurity Yearbook 2026 (PDF, in Estonian).
