Threat Intelligence Report — May 28, 2026 | 5 New KEVs · 178 Victims

Report Date: 2026-05-28

New KEVs: 5Ransomware Victims: 178

5 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period, of which 2 are linked to active ransomware campaigns. Nx products show the strongest concentration of risk signals this week. Threat intelligence sources this period reference Lazarus Group (DPRK). Ransomware activity is moderate with 178 new victims posted to leak sites over the last 7 days, with Dragonforce posting the most victims.

Read more