CrowdStrike Analysis Paints Worsening Cybersecurity Picture
Security Boulevard, Tuesday, February 24th, 2026
A report published by CrowdStrike today finds the average breakout time for a cyberattack in 2025 has been reduced to 29 minutes, representing a 65% year-over-year reduction.
At the same time, CrowdStrike is also reporting there was a 42% increase in the number of zero-day vulnerabilities being exploited prior to public disclosure. Additionally, 82% of detections in 2025 were malware-free, according to the report.
Adam Meyers, senior vice president for counter adversary at CrowdStrike, said that shift in tactics suggests malicious actors are more interested in evading detection to ensure they have long-term persistent access to IT environments versus simply relying on traditional smash and grab techniques.