Threat Intelligence for Every Defender
ThreatPodium Report Date: 2026-07-02
New KEVs: 2 ▼ -4 vs last weekRansomware Victims: 202 ▲ +46 vs last week
2 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Simplehelp products show the strongest concentration of risk signals this week. Threat intelligence sources this period reference INC Ransom and Scattered Spider. Ransomware activity is moderate with 202 new victims posted to leak sites over the last 7 days, with Thegentlemen posting the most victims.
Remote Desktop Protocol (RDP) lateral movement occurs when an adversary uses valid credentials to interactively log into a remote Windows system via port 338…
Report Date: 2026-07-01
New KEVs: 4 ▼ -1 vs last weekRansomware Victims: 145 ▼ -23 vs last week
4 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Microsoft products show the strongest concentration of risk signals this week. Threat intelligence sources this period reference Scattered Spider. Ransomware activity is moderate with 145 new victims posted to leak sites over the last 7 days, with Settra posting the most victims.
System Information Discovery (T1082) is a technique where adversaries enumerate detailed information about a target system — including OS version, patch leve…
Report Date: 2026-06-30
New KEVs: 3 ▼ -2 vs last weekRansomware Victims: 131 ▼ -34 vs last week
3 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Simplehelp products show the strongest concentration of risk signals this week. Ransomware activity is moderate with 131 new victims posted to leak sites over the last 7 days, with Settra posting the most victims.
Domain Groups enumeration (T1069.002) is the act of querying Active Directory or a domain controller to map out domain-level groups and their memberships. At…
Report Date: 2026-06-29
New KEVs: 7 ▲ +5 vs last weekRansomware Victims: 117 ▼ -55 vs last week
7 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Ubiquiti products show the strongest concentration of risk signals this week. Ransomware activity is moderate with 117 new victims posted to leak sites over the last 7 days, with Qilin posting the most victims.
Domain Account Discovery (T1087.002) is a technique where adversaries enumerate domain user accounts and groups to map out the Active Directory environment. …