| Technique | IP Addresses (T1590.005) |
| Tactic | Reconnaissance |
| Platforms | PRE |
ThreatPodium
Threat Intelligence Report — October 13, 2026 | 5 New KEVs · 234 Victims
Report Date: 2026-10-13
New KEVs: 5 — unchanged vs last weekRansomware Victims: 234 ▲ +2 vs last week
5 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Proftpd products show the strongest concentration of risk signals this week. Threat intelligence sources this period reference Qilin. Ransomware activity is moderate with 234 new victims posted to leak sites over the last 7 days, with N0N posting the most victims.
Threat Intelligence Report — October 12, 2026 | 5 New KEVs · 202 Victims
Report Date: 2026-10-12
New KEVs: 5Ransomware Victims: 202
5 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Strapi products show the strongest concentration of risk signals this week. Threat intelligence sources this period reference Qilin. Ransomware activity is moderate with 202 new victims posted to leak sites over the last 7 days, with Thegentlemen posting the most victims.
Threat Intelligence Report — October 10, 2026 | 6 New KEVs · 197 Victims
Report Date: 2026-10-10
New KEVs: 6 ▼ -1 vs last weekRansomware Victims: 197 ▼ -32 vs last week
6 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Citrix products show the strongest concentration of risk signals this week. Threat intelligence sources this period reference Qilin. Ransomware activity is moderate with 197 new victims posted to leak sites over the last 7 days, with Thegentlemen posting the most victims.
Threat Intelligence Report — October 9, 2026 | 6 New KEVs · 151 Victims
Report Date: 2026-10-09
New KEVs: 6 ▲ +1 vs last weekRansomware Victims: 151 ▼ -73 vs last week
6 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Citrix products show the strongest concentration of risk signals this week. Threat intelligence sources this period reference Flax Typhoon (China). Ransomware activity is moderate with 151 new victims posted to leak sites over the last 7 days, with Qilin posting the most victims.