company

IBM X-Force

Cited via the 2026 X-Force Threat Index for the finding that vulnerability exploitation is now the leading cause of observed incidents.

Known aliases

X-Force
X-Force Threat Index

Relationships

No evidence-backed relationships are recorded.

Current clusters

build1 distinct publisher

Counting from the vendor advisory stretches the exploitation window to 116 days

Root Evidence rebuilt the exploitation clock on vendor advisory dates rather than NVD publication, and Jeremiah Grossman's team reads the resulting four-month median as a measure of inventory that stopped being maintained.

Publishers:cyrilsimonnet.substack.com

Reality

Evidence62
Adoption20
Hype gap+12
Incentives58

security1 distinct publisher

A 22-second handoff makes the triage queue the vulnerability, not the headcount

Arctic Wolf says compromised access now changes hands in 22 seconds, down from eight hours in 2022. The figure is unsourced in the post, but if it holds, the argument moves from hiring to delegation.

Publishers:arcticwolf.com

Reality

Evidence34
Adoption: Insufficient
Hype gap