Threat Intelligence for Every Defender
ThreatPodium Report Date: 2026-06-24
New KEVs: 5 ▲ +5 vs last weekRansomware Victims: 168 ▼ -19 vs last week
5 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Ubiquiti products show the strongest concentration of risk signals this week. Ransomware activity is moderate with 168 new victims posted to leak sites over the last 7 days, with Lockbit5 posting the most victims.
Pass the Hash (PtH) is a credential-based lateral movement technique where an attacker uses a captured NTLM password hash — rather than the plaintext passwor…
Report Date: 2026-06-23
New KEVs: 5 — unchanged vs last weekRansomware Victims: 165 ▼ -39 vs last week
5 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Ubiquiti products show the strongest concentration of risk signals this week. Ransomware activity is moderate with 165 new victims posted to leak sites over the last 7 days, with Lockbit5 posting the most victims.
Kerberoasting is a credential theft technique in which an attacker with any valid domain account requests Kerberos Ticket-Granting Service (TGS) tickets for …
Report Date: 2026-06-22
New KEVs: 2 ▼ -5 vs last weekRansomware Victims: 172 ▼ -26 vs last week
2 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Splunk products show the strongest concentration of risk signals this week. Threat intelligence sources this period reference Evil Corp. Ransomware activity is moderate with 172 new victims posted to leak sites over the last 7 days, with Lockbit5 posting the most victims.
Password spraying is a credential access technique where an adversary attempts a single commonly used password — or a very short list — across a large number…