Cyber Threat Report: W/C August 31, 2026
363
Threat Clusters
1500
Articles Analyzed
53.2
Avg Threat Score
142
Rising Entities
Top threats
China-Linked QTFY Group Targets Critical Infrastructure with Advanced Exploits
80.8
SonicWall SMA1000 Faces Critical Zero-Day Exploitation
80.8
Chinese Operator Breaches Philippine Nuclear and Naval Entities
80.7
Critical Vulnerabilities in SonicWall SMA1000 Series Allow Remote Code Execution
80.2
SonicWall SMA 1000 Series Faces Critical Zero-Day Exploits
80.0
SonicWall SMA1000 Faces Third Zero-Day Attack with MFA Seeds Compromised
80.0
Critical Exploitation of Sangoma Switchvox Vulnerabilities Underway
78.8
Mirage Kitten Targets Aviation and FinTech with New Cross-Platform Malware
78.5
AI Cyberattacks Targeting Critical Infrastructure Escalate
78.0
GeoNetwork Vulnerabilities Enable Unauthenticated RCE in Government Systems
78.0
UAC-0099 Uses GuardBreaker to Evade AI Malware Detection
77.7
Serbian Activists Targeted by Advanced Spyware Ahead of Elections
77.0
Ransomware leak sites this week
158 victim listings across 40 groups, from ThreatCluster's own collection of ransomware leak sites. Listings are claims by the groups, not confirmed breaches. Most-listed sectors: Manufacturing (23), Technology (20), Professional Services (20), Not Found (17), Other (15).
| Group | Listings |
|---|---|
| settra | 17 |
| krybit | 15 |
| incransom | 13 |
| akira | 10 |
| qilin | 9 |
| braincipher | 8 |
| storm | 8 |
| silentransomgroup | 7 |
| lockbit5 | 6 |
| thegentlemen | 6 |
Ransomware tracker · Dark web API
Rising entities
Apt Group
- Apt29+300%
- Silver Fox+300%
- ShinyHunters+67%
- Sandworm+100%
- Smoke Sandstorm+100%
Attack Type
- Malware+90%
- Phishing+76%
- Denial of Service+462%
- Zero-day Exploit+47%
- Ransomware+46%
Campaign
Country
- Bulgaria+1800%
- United States+31%
- Serbia+1100%
- Romania+143%
- Canada+44%
Cve
- CVE-2026-82329+150%
- CVE-2026-82078+300%
- CVE-2026-46331+200%
- CVE-2026-81578+200%
- CVE-2026-53133+200%
Cwe
Mitre Attack
Platform
- Linux+86%
- Windows+136%
- Microsoft Edge+1100%
- Android+133%
- SUSE Linux Enterprise Server+533%
Ransomware Group
- WannaCry+200%
- 8Base+100%
- JadepufferNEW
- SettraNEW
- KrybitNEW
Tool
- Google Chrome+3100%
- PowerShell+243%
- Dropbox+650%
- Node.js+600%
- Git+600%
Vulnerability
- OS Command Injection+600%
- EternalBlue+300%
- XSS+17%
- KindaRails2ShellNEW
- PostGREShellNEW
Entity type distribution
| Entity type | Count |
|---|---|
| Cve | 598 |
| Platform | 535 |
| Company | 307 |
| Tool | 235 |
| Malware | 170 |
| Country | 111 |
| Apt Group | 103 |
| Mitre Attack | 99 |
| Campaign | 69 |
| Vulnerability | 53 |
| Industry | 39 |
| Ransomware Group | 38 |
| Cwe | 35 |
| Attack Type | 33 |
| Eth | 1 |
| Btc | 1 |