Threat Intelligence for Every Defender
ThreatPodium Report Date: 2026-07-26
New KEVs: 6 ▼ -1 vs last weekRansomware Victims: 232 ▲ +63 vs last week
6 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. WordPress products show the strongest concentration of risk signals this week. Ransomware activity is moderate with 232 new victims posted to leak sites over the last 7 days, with Qilin posting the most victims.
External Remote Services (T1133) describes adversaries abusing legitimate remote access mechanisms — VPNs, Citrix, RDP gateways, SSH, VNC, exposed APIs, and …
Report Date: 2026-07-25
New KEVs: 6 ▼ -1 vs last weekRansomware Victims: 175 ▲ +15 vs last week
6 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. WordPress products show the strongest concentration of risk signals this week. Ransomware activity is moderate with 175 new victims posted to leak sites over the last 7 days, with Qilin posting the most victims.
Malicious File (T1204.002) describes an attacker tricking a user into opening a weaponized file — such as a macro-enabled Office document, a disguised execut…
Report Date: 2026-07-24
New KEVs: 6 ▼ -1 vs last weekRansomware Victims: 169 ▼ -2 vs last week
6 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. WordPress products show the strongest concentration of risk signals this week. Threat intelligence sources this period reference Qilin. Ransomware activity is moderate with 169 new victims posted to leak sites over the last 7 days, with Qilin posting the most victims.
T1059.007 covers adversary abuse of JavaScript and its runtime variants — including JScript on Windows, Node.js across platforms, and JavaScript for Automati…
Report Date: 2026-07-23
New KEVs: 6 ▼ -1 vs last weekRansomware Victims: 178 ▼ -53 vs last week
6 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. WordPress products show the strongest concentration of risk signals this week. Threat intelligence sources this period reference Qilin. Ransomware activity is moderate with 178 new victims posted to leak sites over the last 7 days, with Qilin posting the most victims.
Match Legitimate Resource Name or Location (T1036.005) is a masquerading technique where adversaries rename malicious executables, scripts, or other resource…
Report Date: 2026-07-22
New KEVs: 7 — unchanged vs last weekRansomware Victims: 164 ▼ -48 vs last week
7 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Microsoft products show the strongest concentration of risk signals this week. Threat intelligence sources this period reference Qilin. Ransomware activity is moderate with 164 new victims posted to leak sites over the last 7 days, with Qilin posting the most victims.