The State of Cloud Security Risk 2026

21.5 days to weaponization: the number that retires severity-score triage

Wiz says the disclosure-to-exploitation window has fallen from over two years to 21.5 days, and that more than half of high-priority findings vanish once reachability is applied. Both numbers are its own.