$4.44M average. Wrong number to chase.
The US has charged Russian individuals and firms for running cybercrime services, including those previously sanctioned by the US and its allies, highlighting the evolving cybercrime landscape and potential nation-state involvement. Notably, LockBit ransomware has been linked to Russian cybercrime groups, with a median ransom demand of $1.32M in 2025.
The conventional reading misses that 42% of exploited vulnerabilities in 2025 were weaponized before public disclosure, according to CrowdStrike's Global Threat Report 2026. This pattern is consistent with the 89% increase in AI-enabled adversary activity in 2025, as reported by CrowdStrike.
The defensive math: -> Implement a vulnerability exploitation-window reduction program to cut the 187-day median patch-to-exploit time, aiming for a 30-day reduction within the next quarter. -> Enhance identity perimeter security to address the 60% of breaches involving the human element, as cited in Verizon's DBIR 2025. -> Conduct a third-party assurance review to mitigate the 30% of breaches involving third-party compromise, as reported by Verizon's DBIR 2025.
Can your organization reduce its vulnerability exploitation window by 30 days in the next quarter?