Threat Intelligence for Every Defender
ThreatPodium Obfuscated Files or Information (T1027) describes the practice of encoding, encrypting, compressing, or otherwise obscuring malicious content to make it hard…
Report Date: 2026-06-26
New KEVs: 6 ▲ +6 vs last weekRansomware Victims: 153 ▲ +5 vs last week
6 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Ubiquiti products show the strongest concentration of risk signals this week. Threat intelligence sources this period reference Scattered Spider. Ransomware activity is moderate with 153 new victims posted to leak sites over the last 7 days, with Lockbit5 posting the most victims.
Regsvr32.exe is a legitimate Windows utility designed to register and unregister COM objects and DLLs. Attackers abuse it to execute malicious scripts or DLL…
Report Date: 2026-06-25
New KEVs: 6 ▲ +6 vs last weekRansomware Victims: 156 ▼ -7 vs last week
6 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Ubiquiti products show the strongest concentration of risk signals this week. Ransomware activity is moderate with 156 new victims posted to leak sites over the last 7 days, with Lockbit5 posting the most victims.
Rundll32.exe is a legitimate Windows utility designed to load and execute functions exported from DLL files. Attackers abuse it to execute malicious payloads…
Report Date: 2026-06-24
New KEVs: 5 ▲ +5 vs last weekRansomware Victims: 168 ▼ -19 vs last week
5 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Ubiquiti products show the strongest concentration of risk signals this week. Ransomware activity is moderate with 168 new victims posted to leak sites over the last 7 days, with Lockbit5 posting the most victims.
Pass the Hash (PtH) is a credential-based lateral movement technique where an attacker uses a captured NTLM password hash — rather than the plaintext passwor…
Report Date: 2026-06-23
New KEVs: 5 — unchanged vs last weekRansomware Victims: 165 ▼ -39 vs last week
5 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Ubiquiti products show the strongest concentration of risk signals this week. Ransomware activity is moderate with 165 new victims posted to leak sites over the last 7 days, with Lockbit5 posting the most victims.