Threat Intelligence Report — May 31, 2026 | 5 New KEVs · 162 Victims

Report Date: 2026-05-31

New KEVs: 5  ▼ -2 vs last weekRansomware Victims: 162  ▲ +35 vs last week

5 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period, of which 2 are linked to active ransomware campaigns. Litespeed products show the strongest concentration of risk signals this week. Ransomware activity is moderate with 162 new victims posted to leak sites over the last 7 days, with Dragonforce posting the most victims.

Read more