HIGH
CVSS 8.8 HIGH · EPSS 3% · Microsoft SharePoint Server
ThreatPodium
Detection Playbook: System Information Discovery (T1082)
System Information Discovery (T1082) is a technique where adversaries enumerate detailed information about a target system — including OS version, patch leve…
Threat Intelligence Report — June 30, 2026 | 3 New KEVs · 131 Victims
Report Date: 2026-06-30
New KEVs: 3 ▼ -2 vs last weekRansomware Victims: 131 ▼ -34 vs last week
3 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Simplehelp products show the strongest concentration of risk signals this week. Ransomware activity is moderate with 131 new victims posted to leak sites over the last 7 days, with Settra posting the most victims.
Detection Playbook: Domain Groups (T1069.002)
Domain Groups enumeration (T1069.002) is the act of querying Active Directory or a domain controller to map out domain-level groups and their memberships. At…
Threat Intelligence Report — June 29, 2026 | 7 New KEVs · 117 Victims
Report Date: 2026-06-29
New KEVs: 7 ▲ +5 vs last weekRansomware Victims: 117 ▼ -55 vs last week
7 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Ubiquiti products show the strongest concentration of risk signals this week. Ransomware activity is moderate with 117 new victims posted to leak sites over the last 7 days, with Qilin posting the most victims.
Detection Playbook: Domain Account (T1087.002)
Domain Account Discovery (T1087.002) is a technique where adversaries enumerate domain user accounts and groups to map out the Active Directory environment. …
Threat Intelligence Report — June 28, 2026 | 6 New KEVs · 114 Victims
Report Date: 2026-06-28
New KEVs: 6 ▲ +6 vs last weekRansomware Victims: 114 ▼ -94 vs last week
6 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Ubiquiti products show the strongest concentration of risk signals this week. Threat intelligence sources this period reference Turla (Russia). Ransomware activity is moderate with 114 new victims posted to leak sites over the last 7 days, with Stormous posting the most victims.
Detection Playbook: Network Service Discovery (T1046)
Network Service Discovery (T1046) is a reconnaissance technique where adversaries scan local and remote systems to enumerate running services, open ports, an…
Threat Intelligence Report — June 27, 2026 | 6 New KEVs · 95 Victims
Report Date: 2026-06-27
New KEVs: 6 ▲ +4 vs last weekRansomware Victims: 95 ▼ -109 vs last week
6 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Ubiquiti products show the strongest concentration of risk signals this week. Threat intelligence sources this period reference Turla (Russia). Ransomware activity is low with 95 new victims posted to leak sites over the last 7 days, with Nova posting the most victims.