CRITICAL
CVSS 10.0 CRITICAL · EPSS 1% · JoomShaper SP Page Builder
ThreatPodium
Detection Playbook: Valid Accounts (T1078)
Valid Accounts (T1078) describes adversaries using legitimate, existing credentials — stolen, purchased, phished, or brute-forced — to access systems and ser…
Threat Intelligence Report — July 6, 2026 | 1 New KEVs · 192 Victims
Report Date: 2026-07-06
New KEVs: 1 ▼ -6 vs last weekRansomware Victims: 192 ▲ +75 vs last week
One new vulnerability was added to the CISA KEV catalog this period. Microsoft products show the strongest concentration of risk signals this week. Ransomware activity is moderate with 192 new victims posted to leak sites over the last 7 days, with Thegentlemen posting the most victims.
Detection Playbook: Spearphishing Link (T1566.002)
Spearphishing Link (T1566.002) is a targeted email attack where adversaries send carefully crafted messages containing malicious URLs to specific individuals…
Threat Intelligence Report — July 5, 2026 | 2 New KEVs · 188 Victims
Report Date: 2026-07-05
New KEVs: 2 ▼ -4 vs last weekRansomware Victims: 188 ▲ +74 vs last week
2 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Microsoft products show the strongest concentration of risk signals this week. Ransomware activity is moderate with 188 new victims posted to leak sites over the last 7 days, with Thegentlemen posting the most victims.
Detection Playbook: Spearphishing Attachment (T1566.001)
Spearphishing Attachment (T1566.001) is a targeted email-based attack where an adversary sends a crafted email to a specific individual, company, or industry…
Threat Intelligence Report — July 4, 2026 | 2 New KEVs · 202 Victims
Report Date: 2026-07-04
New KEVs: 2 ▼ -4 vs last weekRansomware Victims: 202 ▲ +107 vs last week
2 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Microsoft products show the strongest concentration of risk signals this week. Ransomware activity is moderate with 202 new victims posted to leak sites over the last 7 days, with Thegentlemen posting the most victims.
Detection Playbook: Service Execution (T1569.002)
Service Execution (T1569.002) describes how adversaries abuse the Windows Service Control Manager (SCM) to run malicious commands or payloads — either by cre…
Threat Intelligence Report — July 3, 2026 | 2 New KEVs · 199 Victims
Report Date: 2026-07-03
New KEVs: 2 ▼ -4 vs last weekRansomware Victims: 199 ▲ +46 vs last week
2 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Microsoft products show the strongest concentration of risk signals this week. Ransomware activity is moderate with 199 new victims posted to leak sites over the last 7 days, with Thegentlemen posting the most victims.
Detection Playbook: SMB/Windows Admin Shares (T1021.002)
SMB/Windows Admin Shares (T1021.002) is a lateral movement technique where attackers use valid credentials — stolen, brute-forced, or obtained through creden…