Threat Intelligence Report — June 3, 2026 | 5 New KEVs · 143 Victims

Report Date: 2026-06-03

New KEVs: 5  ▼ -2 vs last weekRansomware Victims: 143  ▼ -6 vs last week

5 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Oracle products show the strongest concentration of risk signals this week. Ransomware activity is moderate with 143 new victims posted to leak sites over the last 7 days, with Qilin posting the most victims.

Read more

Threat Intelligence Report — June 2, 2026 | 7 New KEVs · 159 Victims

Report Date: 2026-06-02

New KEVs: 7  — unchanged vs last weekRansomware Victims: 159  ▲ +35 vs last week

7 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period, of which 2 are linked to active ransomware campaigns. Oracle products show the strongest concentration of risk signals this week. Ransomware activity is moderate with 159 new victims posted to leak sites over the last 7 days, with Dragonforce posting the most victims.

Read more

Threat Intelligence Report — June 1, 2026 | 6 New KEVs · 155 Victims

Report Date: 2026-06-01

New KEVs: 6  ▼ -1 vs last weekRansomware Victims: 155  ▲ +22 vs last week

6 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period, of which 2 are linked to active ransomware campaigns. Oracle products show the strongest concentration of risk signals this week. Ransomware activity is moderate with 155 new victims posted to leak sites over the last 7 days, with Dragonforce posting the most victims.

Read more

Threat Intelligence Report — May 31, 2026 | 5 New KEVs · 162 Victims

Report Date: 2026-05-31

New KEVs: 5  ▼ -2 vs last weekRansomware Victims: 162  ▲ +35 vs last week

5 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period, of which 2 are linked to active ransomware campaigns. Litespeed products show the strongest concentration of risk signals this week. Ransomware activity is moderate with 162 new victims posted to leak sites over the last 7 days, with Dragonforce posting the most victims.

Read more

Threat Intelligence Report — May 30, 2026 | 5 New KEVs · 193 Victims

Report Date: 2026-05-30

New KEVs: 5Ransomware Victims: 193

5 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period, of which 2 are linked to active ransomware campaigns. Palo Alto Networks products show the strongest concentration of risk signals this week. Ransomware activity is moderate with 193 new victims posted to leak sites over the last 7 days, with Dragonforce posting the most victims.

Read more

Threat Intelligence Report — May 29, 2026 | 5 New KEVs · 182 Victims

Report Date: 2026-05-29

New KEVs: 5Ransomware Victims: 182

5 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period, of which 2 are linked to active ransomware campaigns. Litespeed products show the strongest concentration of risk signals this week. Ransomware activity is moderate with 182 new victims posted to leak sites over the last 7 days, with Dragonforce posting the most victims.

Read more

Threat Intelligence Report — May 28, 2026 | 5 New KEVs · 178 Victims

Report Date: 2026-05-28

New KEVs: 5Ransomware Victims: 178

5 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period, of which 2 are linked to active ransomware campaigns. Nx products show the strongest concentration of risk signals this week. Threat intelligence sources this period reference Lazarus Group (DPRK). Ransomware activity is moderate with 178 new victims posted to leak sites over the last 7 days, with Dragonforce posting the most victims.

Read more

Threat Intelligence Report — May 27, 2026 | 7 New KEVs · 149 Victims

Report Date: 2026-05-27

New KEVs: 7Ransomware Victims: 149

7 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Langflow products show the strongest concentration of risk signals this week. Threat intelligence sources this period reference Lazarus Group (DPRK). Ransomware activity is moderate with 149 new victims posted to leak sites over the last 7 days, with Dragonforce posting the most victims.

Read more

Threat Intelligence Report — May 26, 2026 | 7 New KEVs · 124 Victims

Report Date: 2026-05-26

New KEVs: 7Ransomware Victims: 124

7 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Microsoft products show the strongest concentration of risk signals this week. Threat intelligence sources this period reference Lazarus Group (DPRK) and MuddyWater (Iran). Ransomware activity is moderate with 124 new victims posted to leak sites over the last 7 days, with Qilin posting the most victims.

Read more

Threat Intelligence Report — May 25, 2026 | 7 New KEVs · 133 Victims

Report Date: 2026-05-25

New KEVs: 7Ransomware Victims: 133

7 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Microsoft products show the strongest concentration of risk signals this week. Threat intelligence sources this period reference Turla (Russia). Ransomware activity is moderate with 133 new victims posted to leak sites over the last 7 days, with Dragonforce posting the most victims.

Read more