Threat Intelligence Report — June 2, 2026 | 7 New KEVs · 159 Victims

Report Date: 2026-06-02

New KEVs: 7  — unchanged vs last weekRansomware Victims: 159  ▲ +35 vs last week

7 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period, of which 2 are linked to active ransomware campaigns. Oracle products show the strongest concentration of risk signals this week. Ransomware activity is moderate with 159 new victims posted to leak sites over the last 7 days, with Dragonforce posting the most victims.

Read more

CVE-2025-48595 — Android Framework: Integer Overflow | CVSS 8.4 HIGH

HIGH

CVSS 8.4 HIGH  ·  EPSS 0%  ·  Android Framework

Read more

CVE-2022-0492 — Linux Kernel: Improper Authentication | CVSS 7.8 HIGH

HIGH

CVSS 7.8 HIGH  ·  EPSS 5%  ·  Linux Kernel

Read more

Threat Intelligence Report — June 1, 2026 | 6 New KEVs · 155 Victims

Report Date: 2026-06-01

New KEVs: 6  ▼ -1 vs last weekRansomware Victims: 155  ▲ +22 vs last week

6 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period, of which 2 are linked to active ransomware campaigns. Oracle products show the strongest concentration of risk signals this week. Ransomware activity is moderate with 155 new victims posted to leak sites over the last 7 days, with Dragonforce posting the most victims.

Read more

CVE-2024-21182 — Oracle WebLogic Server | CVSS 7.5 HIGH

HIGH

CVSS 7.5 HIGH  ·  EPSS 88%  ·  Oracle WebLogic Server

Read more

Threat Intelligence Report — May 31, 2026 | 5 New KEVs · 162 Victims

Report Date: 2026-05-31

New KEVs: 5  ▼ -2 vs last weekRansomware Victims: 162  ▲ +35 vs last week

5 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period, of which 2 are linked to active ransomware campaigns. Litespeed products show the strongest concentration of risk signals this week. Ransomware activity is moderate with 162 new victims posted to leak sites over the last 7 days, with Dragonforce posting the most victims.

Read more

Threat Intelligence Report — May 30, 2026 | 5 New KEVs · 193 Victims

Report Date: 2026-05-30

New KEVs: 5Ransomware Victims: 193

5 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period, of which 2 are linked to active ransomware campaigns. Palo Alto Networks products show the strongest concentration of risk signals this week. Ransomware activity is moderate with 193 new victims posted to leak sites over the last 7 days, with Dragonforce posting the most victims.

Read more

Threat Intelligence Report — May 29, 2026 | 5 New KEVs · 182 Victims

Report Date: 2026-05-29

New KEVs: 5Ransomware Victims: 182

5 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period, of which 2 are linked to active ransomware campaigns. Litespeed products show the strongest concentration of risk signals this week. Ransomware activity is moderate with 182 new victims posted to leak sites over the last 7 days, with Dragonforce posting the most victims.

Read more

CVE-2026-0257 — Palo Alto Networks PAN-OS | CVSS 7.8 HIGH

HIGH

CVSS 7.8 HIGH  ·  EPSS 0%  ·  Palo Alto Networks PAN-OS

Read more

Threat Intelligence Report — May 28, 2026 | 5 New KEVs · 178 Victims

Report Date: 2026-05-28

New KEVs: 5Ransomware Victims: 178

5 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period, of which 2 are linked to active ransomware campaigns. Nx products show the strongest concentration of risk signals this week. Threat intelligence sources this period reference Lazarus Group (DPRK). Ransomware activity is moderate with 178 new victims posted to leak sites over the last 7 days, with Dragonforce posting the most victims.

Read more