CRITICAL
CVSS 9.3 CRITICAL · EPSS 3% · Citrix NetScaler
ThreatPodium
Threat Intelligence Report — September 8, 2026 | 7 New KEVs · 158 Victims
Report Date: 2026-09-08
New KEVs: 7 — unchanged vs last weekRansomware Victims: 158 ▲ +158 vs last week
7 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Sonicwall products show the strongest concentration of risk signals this week. Ransomware activity is moderate with 158 new victims posted to leak sites over the last 7 days, with Thegentlemen posting the most victims.
Detection Playbook: Gather Victim Network Information (T1590)
| Technique | Gather Victim Network Information (T1590) |
| Tactic | Reconnaissance |
| Platforms | PRE |
Threat Intelligence Report — September 7, 2026 | 7 New KEVs · 170 Victims
Report Date: 2026-09-07
New KEVs: 7Ransomware Victims: 170
7 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Sonicwall products show the strongest concentration of risk signals this week. Threat intelligence sources this period reference Rhysida. Ransomware activity is moderate with 170 new victims posted to leak sites over the last 7 days, with Qilin posting the most victims.
Threat Intelligence Report — September 6, 2026 | 7 New KEVs · 193 Victims
Report Date: 2026-09-06
New KEVs: 7 — unchanged vs last weekRansomware Victims: 193 ▼ -45 vs last week
7 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Berriai products show the strongest concentration of risk signals this week. Ransomware activity is moderate with 193 new victims posted to leak sites over the last 7 days, with Qilin posting the most victims.
Threat Intelligence Report — September 5, 2026 | 7 New KEVs · 223 Victims
Report Date: 2026-09-05
New KEVs: 7 — unchanged vs last weekRansomware Victims: 223 ▼ -19 vs last week
7 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Papercut products show the strongest concentration of risk signals this week. Ransomware activity is moderate with 223 new victims posted to leak sites over the last 7 days, with Thegentlemen posting the most victims.