Critical Vulnerabilities Double as AI-Driven Attacks Accelerate Exposure Gaps — Check Point Software Technologies Ltd.

Event summary

Check Point's 2026 Exposure Gap Report reveals critical vulnerabilities doubled in a year, now accounting for 42.6% of all exposures.
Only 7.8% of vulnerability alerts required urgent action, highlighting a prioritization gap.
Phishing websites surged to 10.5% of critical exposures, up from 1.0% the prior year.
Utilities resolved 30% of critical exposures within one hour, while healthcare lagged at 158.8 hours.

The big picture

Check Point's findings underscore the escalating challenge of managing cybersecurity exposures in an era of AI-driven attacks. As threat actors leverage automation to test vulnerabilities faster than manual triage can respond, organizations must shift from detection-first to exposure-first security models. The report highlights significant industry disparities, particularly in healthcare, where legacy systems and operational constraints slow remediation efforts.

What we're watching

Exposure Management: How organizations adopt exposure-first security strategies to close the widening gap between detection and remediation.
Industry-Specific Risks: Whether healthcare's legacy systems will continue to hinder its ability to quickly address critical exposures.
AI-Driven Attacks: The pace at which AI-assisted attack tools force security teams to automate prioritization and remediation workflows.