--- title: "Vulnerabilities: protection against zero-days | Firevault" description: "60% of breaches exploit unpatched flaws. Offline Secure Storage removes the attack surface by keeping data physically off the network." lang: en-GB json-ld: | [ { "@context": "https://schema.org", "@type": "Organization", "@id": "https://fire-vault.com/#organization", "name": "Firevault", "legalName": "Firevault Limited", "url": "https://fire-vault.com", "logo": { "@type": "ImageObject", "url": "https://fire-vault.com/logo.png", "width": 200, "height": 60 }, "foundingDate": "2025-03", "description": "Protect what matters with Offline Secure Storage and control what moves with Control by Firevault. Physically disconnected, always reachable by you.", "address": { "@type": "PostalAddress", "addressCountry": "GB", "addressLocality": "United Kingdom" }, "contactPoint": [ { "@type": "ContactPoint", "contactType": "customer service", "email": "hello@fire-vault.com", "availableLanguage": "English", "areaServed": [ "GB", "EU", "US", "AE" ] } ], "sameAs": [ "https://www.linkedin.com/company/firevault", "https://x.com/firevaultuk" ], "slogan": "Disconnect to Protect", "knowsAbout": [ "Offline Secure Storage", "Physical Air Gap Data Protection", "Ransomware Protection", "Data Sovereignty", "GDPR Compliance", "NIS2 Compliance" ] }, { "@context": "https://schema.org", "@type": "WebSite", "@id": "https://fire-vault.com/#website", "name": "Firevault", "alternateName": [ "Firevault", "Firevault UK", "Firevault Limited" ], "url": "https://fire-vault.com", "publisher": { "@id": "https://fire-vault.com/#organization" }, "inLanguage": "en-GB", "description": "Protect what matters with Offline Secure Storage and control what moves with Control by Firevault. Physically disconnected, always reachable by you.", "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://fire-vault.com/learn?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@context": "https://schema.org", "@type": "WebPage", "@id": "https://fire-vault.com/threats/vulnerabilities#webpage", "url": "https://fire-vault.com/threats/vulnerabilities", "name": "Vulnerabilities: protection against zero-days", "description": "60% of breaches exploit unpatched flaws. Offline Secure Storage removes the attack surface by keeping data physically off the network.", "isPartOf": { "@id": "https://fire-vault.com/#website" }, "about": { "@id": "https://fire-vault.com/#organization" }, "primaryImageOfPage": { "@type": "ImageObject", "url": "https://fire-vault.com/images/og/og-base-threats.jpg" }, "inLanguage": "en-GB", "breadcrumb": { "@id": "https://fire-vault.com/threats/vulnerabilities#breadcrumb" } }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "@id": "https://fire-vault.com/threats/vulnerabilities#breadcrumb", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://fire-vault.com" }, { "@type": "ListItem", "position": 2, "name": "Threats", "item": "https://fire-vault.com/threats" }, { "@type": "ListItem", "position": 3, "name": "Vulnerabilities: protection against zero-days", "item": "https://fire-vault.com/threats/vulnerabilities" } ] } ] --- Recent Breaches Breaches [2026 PowerSchool 62.4M records ](/learn/breaches)[2026 DISA Global Solutions 3.3M records ](/learn/breaches)[2026 Globe Life 850K records ](/learn/breaches)[2026 Lidl GB Customer contact data ](/learn/breaches)[2026 Asahi Group Production systems disrupted ](/learn/breaches)[2026 Kido International 8K records ](/learn/breaches)[2026 Collins Aerospace (RTX) Check-in and boarding disruptio... ](/learn/breaches)[2026 Jaguar Land Rover Production and IT systems disru... ](/learn/breaches)[2026 Peter Green Chilled Order and logistics data ](/learn/breaches)[2026 Adidas UK Customer contact details ](/learn/breaches)[2026 PowerSchool 62.4M records ](/learn/breaches)[2026 DISA Global Solutions 3.3M records ](/learn/breaches)[2026 Globe Life 850K records ](/learn/breaches)[2026 Lidl GB Customer contact data ](/learn/breaches)[2026 Asahi Group Production systems disrupted ](/learn/breaches)[2026 Kido International 8K records ](/learn/breaches)[2026 Collins Aerospace (RTX) Check-in and boarding disruptio... ](/learn/breaches)[2026 Jaguar Land Rover Production and IT systems disru... ](/learn/breaches)[2026 Peter Green Chilled Order and logistics data ](/learn/breaches)[2026 Adidas UK Customer contact details ](/learn/breaches) [View All →](/learn/breaches) [![Firevault - offline secure storage, physically disconnected from the internet](/assets/logo-color-DBVl0KCg.png)](/) Products Solutions [Why OSS](/why-oss) More [Help](/help)[Get started](/get-started) [Back to the threat counter](/threats) Threat brief # Unpatched vulnerabilities. The open door. Every connected system carries vulnerabilities. The question is not whether they will be found, but whether you patch before somebody exploits them. The headline number 60% of breaches exploit unpatched vulnerabilities Average time to patch 97 days Patch within 24 hours 10% CVEs published in 2024 28,000+ 97 days Average time to patch critical flaws 10% Organisations patching within 24 hours 60% Breaches involving unpatched flaws 28,000+ CVEs published in 2024 Vulnerability types ## Every connected system has weaknesses Four classes of weakness, each with a different window between discovery and exploitation. ### Zero-Day Exploits Time to exploit: < 24 hours Unknown vulnerabilities discovered and exploited before vendors can issue patches. Organisations are defenceless until a fix is released. **Example:** MOVEit (2023) - Zero-day in file transfer software exposed 77M+ people ### Known Vulnerabilities Time to exploit: 15 days average Patches exist but are not applied. The average time to exploit a known vulnerability is just 15 days, faster than most patch cycles. **Example:** Log4Shell - Critical vulnerability, many systems still unpatched a year later ### Misconfigurations Time to exploit: Immediate Open ports, default credentials, exposed admin panels. These are not bugs. They are setup mistakes that create easy entry points. **Example:** Microsoft Power Apps - 38M records exposed via misconfigured portals ### Legacy Systems Time to exploit: Permanent risk End-of-life software receiving no security updates. Many critical systems run on Windows 7, XP, or even older platforms. **Example:** WannaCry - Exploited Windows XP systems still running in NHS hospitals Recent exploits ## Vulnerabilities under active exploitation ### MOVEit Transfer `CVE-2023-34362` 77 million individuals affected Victims 2,600+ organisations ### Citrix NetScaler `CVE-2023-4966` Session hijacking and data theft Victims Major corporations ### FortiOS SSL VPN `CVE-2022-42475` Remote code execution Victims Government agencies ## You cannot patch fast enough. Disconnect instead. With more than 28,000 new vulnerabilities published each year, patching is an endless race. Offline Secure Storage® removes the attack surface, so there is nothing on the network to exploit. [See how Offline Secure Storage® protects](/vault)[Why OSS is different](/why-oss) ![Mark Fermor](/assets/mark-fermor-aWtKNSv7.jpg) ![David Bailey](/assets/david-bailey-Dgqj8eaE.jpg) ![Kenny Phipps](/assets/kenny-phipps-CVyooRsR.jpg) Online Now Concierge ## Which offline secure storage solution is right for you? Answer a few quick questions and we will recommend the right solution, whether that is a personal vault or a scalable offline storage system built for your needs. Takes about 2 minutes. No account needed. Find Out Free 2 mins No sign-up