HIGH
CVSS 8.2 HIGH · EPSS 0% · N-able N-central
ThreatPodium
Detection Playbook: Virtualization/Sandbox Evasion (T1497)
Virtualization/Sandbox Evasion (T1497) describes a class of techniques where malware actively probes its execution environment to determine whether it is run…
Threat Intelligence Report — August 3, 2026 | 2 New KEVs · 186 Victims
Report Date: 2026-08-03
New KEVs: 2 ▼ -5 vs last weekRansomware Victims: 186 ▼ -82 vs last week
2 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Cisco products show the strongest concentration of risk signals this week. Ransomware activity is moderate with 186 new victims posted to leak sites over the last 7 days, with Thegentlemen posting the most victims.
Detection Playbook: Ingress Tool Transfer (T1105)
Ingress Tool Transfer (T1105) describes the technique where adversaries download or copy tools, scripts, or payloads from an external system they control int…
Threat Intelligence Report — August 2, 2026 | 3 New KEVs · 213 Victims
Report Date: 2026-08-02
New KEVs: 3 ▼ -3 vs last weekRansomware Victims: 213 ▼ -19 vs last week
3 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Cisco products show the strongest concentration of risk signals this week. Ransomware activity is moderate with 213 new victims posted to leak sites over the last 7 days, with Thegentlemen posting the most victims.
Detection Playbook: Exploit Public-Facing Application (T1190)
Exploit Public-Facing Application (T1190) describes adversaries gaining initial access by attacking a vulnerability — a software bug, misconfiguration, or un…
Threat Intelligence Report — August 1, 2026 | 3 New KEVs · 243 Victims
Report Date: 2026-08-01
New KEVs: 3 ▼ -3 vs last weekRansomware Victims: 243 ▲ +68 vs last week
3 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Fortinet products show the strongest concentration of risk signals this week. Ransomware activity is moderate with 243 new victims posted to leak sites over the last 7 days, with Thegentlemen posting the most victims.
Detection Playbook: Drive-by Compromise (T1189)
Drive-by Compromise (T1189) is an initial access technique where an attacker causes a victim to gain code execution on their system simply by visiting a mali…
Threat Intelligence Report — July 31, 2026 | 3 New KEVs · 244 Victims
Report Date: 2026-07-31
New KEVs: 3 ▼ -3 vs last weekRansomware Victims: 244 ▲ +75 vs last week
3 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Arista products show the strongest concentration of risk signals this week. Ransomware activity is moderate with 244 new victims posted to leak sites over the last 7 days, with Thegentlemen posting the most victims.