| Technique | Employee Names (T1589.003) |
| Tactic | Reconnaissance |
| Platforms | PRE |
ThreatPodium
Threat Intelligence Report — September 1, 2026 | 7 New KEVs
Report Date: 2026-09-01
New KEVs: 7 ▲ +1 vs last weekRansomware Victims: 0 ▼ -252 vs last week
7 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Papercut products show the strongest concentration of risk signals this week.
Threat Intelligence Report — August 30, 2026 | 7 New KEVs · 238 Victims
Report Date: 2026-08-30
New KEVs: 7 — unchanged vs last weekRansomware Victims: 238 ▼ -16 vs last week
7 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Microsoft products show the strongest concentration of risk signals this week. Threat intelligence sources this period reference APT28 / Fancy Bear (Russia) and Rhysida. Ransomware activity is moderate with 238 new victims posted to leak sites over the last 7 days, with Qilin posting the most victims.
Threat Intelligence Report — August 29, 2026 | 7 New KEVs · 242 Victims
Report Date: 2026-08-29
New KEVs: 7 — unchanged vs last weekRansomware Victims: 242 ▼ -2 vs last week
7 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Microsoft products show the strongest concentration of risk signals this week. Threat intelligence sources this period reference APT28 / Fancy Bear (Russia). Ransomware activity is moderate with 242 new victims posted to leak sites over the last 7 days, with Qilin posting the most victims.
Threat Intelligence Report — August 28, 2026 | 7 New KEVs · 248 Victims
Report Date: 2026-08-28
New KEVs: 7 — unchanged vs last weekRansomware Victims: 248 ▲ +15 vs last week
7 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Microsoft products show the strongest concentration of risk signals this week. Ransomware activity is moderate with 248 new victims posted to leak sites over the last 7 days, with Qilin posting the most victims.
Threat Intelligence Report — August 27, 2026 | 7 New KEVs · 252 Victims
Report Date: 2026-08-27
New KEVs: 7 — unchanged vs last weekRansomware Victims: 252 ▲ +16 vs last week
7 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Microsoft products show the strongest concentration of risk signals this week. Ransomware activity is moderate with 252 new victims posted to leak sites over the last 7 days, with Qilin posting the most victims.