CRITICAL
CVSS 10.0 CRITICAL · EPSS 0% · LiteSpeed cPanel Plugin
ThreatPodium
Threat Intelligence Report — May 25, 2026 | 7 New KEVs · 133 Victims
Report Date: 2026-05-25
New KEVs: 7Ransomware Victims: 133
7 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Microsoft products show the strongest concentration of risk signals this week. Threat intelligence sources this period reference Turla (Russia). Ransomware activity is moderate with 133 new victims posted to leak sites over the last 7 days, with Dragonforce posting the most victims.
Threat Intelligence Report — May 24, 2026 | 7 New KEVs · 127 Victims
Report Date: 2026-05-24
New KEVs: 7Ransomware Victims: 127
7 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Microsoft products show the strongest concentration of risk signals this week. Threat intelligence sources this period reference Turla (Russia). Ransomware activity is moderate with 127 new victims posted to leak sites over the last 7 days, with Qilin posting the most victims.
Threat Intelligence Report — May 23, 2026 | 7 New KEVs · 128 Victims
Report Date: 2026-05-23
New KEVs: 7Critical CVEs: 5Ransomware Victims: 128
7 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. 5 additional critical-severity CVEs have been published to the NVD but not yet confirmed as exploited — Microsoft products show the strongest concentration of risk signals this week. Threat intelligence sources this period reference Turla (Russia). Ransomware activity is moderate with 128 new victims posted to leak sites over the last 7 days, with Qilin posting the most victims.
Threat Intelligence Report — May 22, 2026 | 7 New KEVs · 125 Victims
Report Date: 2026-05-22
New KEVs: 7Critical CVEs: 5Ransomware Victims: 125
7 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. 5 additional critical-severity CVEs have been published to the NVD but not yet confirmed as exploited — Microsoft products show the strongest concentration of risk signals this week. Threat intelligence sources this period reference Turla (Russia). Ransomware activity is moderate with 125 new victims posted to leak sites over the last 7 days, with Qilin posting the most victims.
Threat Intelligence Report — May 21, 2026 | 7 New KEVs · 137 Victims
Report Date: 2026-05-21
New KEVs: 7Critical CVEs: 5Ransomware Victims: 137
7 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. 5 additional critical-severity CVEs have been published to the NVD but not yet confirmed as exploited — Microsoft products show the strongest concentration of risk signals this week. Threat intelligence sources this period reference Turla (Russia). Ransomware activity is moderate with 137 new victims posted to leak sites over the last 7 days, with Qilin posting the most victims.
Threat Intelligence Report — May 20, 2026 | 7 New KEVs · 135 Victims
Report Date: 2026-05-20
New KEVs: 7Critical CVEs: 5Ransomware Victims: 135
7 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. 5 additional critical-severity CVEs have been published to the NVD but not yet confirmed as exploited — Microsoft products show the strongest concentration of risk signals this week. Threat intelligence sources this period reference Turla (Russia). Ransomware activity is moderate with 135 new victims posted to leak sites over the last 7 days, with Qilin posting the most victims.