Threat Intelligence for Every Defender
ThreatPodium Report Date: 2026-06-28
New KEVs: 6 ▲ +6 vs last weekRansomware Victims: 114 ▼ -94 vs last week
6 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Ubiquiti products show the strongest concentration of risk signals this week. Threat intelligence sources this period reference Turla (Russia). Ransomware activity is moderate with 114 new victims posted to leak sites over the last 7 days, with Stormous posting the most victims.
Network Service Discovery (T1046) is a reconnaissance technique where adversaries scan local and remote systems to enumerate running services, open ports, an…
Report Date: 2026-06-27
New KEVs: 6 ▲ +4 vs last weekRansomware Victims: 95 ▼ -109 vs last week
6 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Ubiquiti products show the strongest concentration of risk signals this week. Threat intelligence sources this period reference Turla (Russia). Ransomware activity is low with 95 new victims posted to leak sites over the last 7 days, with Nova posting the most victims.
Obfuscated Files or Information (T1027) describes the practice of encoding, encrypting, compressing, or otherwise obscuring malicious content to make it hard…
Report Date: 2026-06-26
New KEVs: 6 ▲ +6 vs last weekRansomware Victims: 153 ▲ +5 vs last week
6 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Ubiquiti products show the strongest concentration of risk signals this week. Threat intelligence sources this period reference Scattered Spider. Ransomware activity is moderate with 153 new victims posted to leak sites over the last 7 days, with Lockbit5 posting the most victims.
Regsvr32.exe is a legitimate Windows utility designed to register and unregister COM objects and DLLs. Attackers abuse it to execute malicious scripts or DLL…
Report Date: 2026-06-25
New KEVs: 6 ▲ +6 vs last weekRansomware Victims: 156 ▼ -7 vs last week
6 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Ubiquiti products show the strongest concentration of risk signals this week. Ransomware activity is moderate with 156 new victims posted to leak sites over the last 7 days, with Lockbit5 posting the most victims.
Rundll32.exe is a legitimate Windows utility designed to load and execute functions exported from DLL files. Attackers abuse it to execute malicious payloads…