product · May 22, 2026

Rapid7 Releases Q1 2026 Threat Landscape Report

Rapid7 Labs published the Q1 2026 Threat Landscape Report on May 21, 2026. Vulnerability exploitation overtook social engineering as the top initial access vector at 38 percent of incidents, with more than 50 percent of exploited vulnerabilities being zero-click and network-facing. The report details geopolitical targeting in the Middle East and law enforcement seizures of RAMP and LeakBase marketplaces. Rapid7 Labs authored the findings on accelerated attack cycles.