Increase in the number of vulnerability in 2025: Analysis and forecasts

Article image Increase in the number of vulnerability in 2025: Analysis and forecasts
Article image Increase in the number of vulnerability in 2025: Analysis and forecasts
Publication date:22.08.2025
Blog category: Web Security

The analysis, published by the Response and Security Response Forum (FIRST), predicts almost 50,000 vulnerabilities in 2025. This is 11% more than in 2024, and 470% more than in 2023. Organizations should move from reactive measures to a more strategic approach, including planning efforts to correct vulnerability and prepare for increasing the number of open vulnerability.

"For a small or medium-sized e-commerce website, correction of vulnerability usually means hiring external partners for SLA to manage patch and minimize downtime. These companies usually do not analyze each CV individually, but they should expect an increase in the requirements for their third-handed IT services for planning and non IT teams or external partners. - Eireann Leverett, First
📊 Example: PatchStack, WordPress security company, actively identifies and corrects vulnerabilities, which helps to increase the number of open vulnerability every year. To date, Patchstack offers vulnerability and virtual patches, which makes other vulnerability less noticeable.
Trend Influence
AI-founded detection Accelerates the detection and discovery of vulnerability
Cyberwar and state -sponsored attacks Increase the amount of vulnerability
CHANGES IN THE ECESYSE CVE New participants like Patchstack affect the opening model and increase the number of open vulnerability
  • 📌 The vulnerability increases - FIRST predicts up to 50,000 Cve in 2025, 11% more than in 2024, and 470% more than in 2023.
  • 📌 AI and the implementation of the open source code increase the number of open vulnerability.
  • 📌 State cyberactivity exposes more weaknesses.
  • 📌 The transition from reactive to proactive safety is necessary to manage risks.
🔮 Forecast: the amount of vulnerability will continue to grow, proactive risk management will become more important.
🧩 Conclusion: In order to manage this increase in vulnerability, organizations must develop strategic approaches to risk management, including planning of proposals to correct vulnerability and prepare for increasing the number of open vulnerability.
🧠 Own thoughts: you cannot ignore this growth of vulnerability. Companies should be actively investing in resources and technology to get ahead of this trend, not try to catch up with it.

Comments

UXNinja Avatar
Чисельно зростає вразливість, але не варто ставити хрест на старих підходах. Організаціям потрібно ставитися до безпеки з максимальним критичним мисленням; покладатися на зовнішні компанії може бути помилкою, якщо не контролювати їхні процеси. Для малих і середніх підприємств важливо не лише виконувати патчі, але й розуміти контекст загроз та адаптувати свої стратегії відповідно. Успіх залежить не лише від кількості патчів, але й від їхньої якості та своєчасності.
22.08.2025 09:00 UXNinja
CSSnLaughs Avatar
Ой, скоро вразливостей буде стільки, що вони можуть створити власний бізнес! Мабуть, 2025 рік стане справжнім "чорним" роком для бізгбюлдерів, якщо не контролювати патчі. Часу на кнопку «Виправити все» не вистачить, а от достатньо кави й круасанів, щоб розуміти, що робити далі – точно не завадить! Пам’ятайте, що в битві з вразливостями, підготовка – це не просто хороший план, але і смачний обід!
22.08.2025 09:50 CSSnLaughs