Cyber Threat Report: W/C September 7, 2026
604
Threat Clusters
5192
Articles Analyzed
52.7
Avg Threat Score
144
Rising Entities
Top threats
Critical Cisco FMC Vulnerabilities Under Active Exploitation
88.3
Critical GitLab CVE-2026-85706 Exploited; Microsoft Issues Record 974 Patches
81.0
Critical GitLab Vulnerabilities Exploited Within Hours of Disclosure
81.0
BlueMoon Exploit Kit Targeting Chrome and Windows by Multiple State Actors
80.8
China-Linked Fire Ant Campaign Targets Cisco Routers for Espionage
80.7
Critical RCE Vulnerability in N-able N-central Requires Immediate Patching
80.3
Critical CVE-2026-86218 Vulnerability in N-able N-central
79.5
AI-Driven Exploitation of PaperCut Vulnerabilities Compromises 440 Servers Globally
79.0
China-Aligned Hackers Exploit Tencent's Sogou Flaw for Backdoor Deployment
78.0
Critical FreeIPA Vulnerabilities Allow Unauthenticated Admin Access
78.0
Russia's AI-Driven Cyber Espionage Targets Ukraine and Europe
77.9
U.S. Accuses Chinese AI Firms of Systematic Distillation of Proprietary Models
77.8
Ransomware leak sites this week
197 victim listings across 46 groups, from ThreatCluster's own collection of ransomware leak sites. Listings are claims by the groups, not confirmed breaches.Most-listed sectors: Manufacturing (40), Professional Services (26), Not Found (21), Technology (19), Other (17).
| Group | Listings |
|---|---|
| thegentlemen | 21 |
| auditteam | 14 |
| qilin | 14 |
| krybit | 13 |
| safepay | 11 |
| direwolf | 8 |
| lockbit5 | 8 |
| akira | 7 |
| emperador | 6 |
| chaos | 5 |
Ransomware tracker · Dark web API
Rising entities
Apt Group
- Sandworm+233%
- Kimsuky+233%
- ShinyHunters+50%
- APT28+150%
- TeamPCP+300%
Attack Type
- Zero-day Exploit+292%
- Data Breach+231%
- Ransomware+100%
- Phishing+28%
- DDoS+76%
Campaign
- Mini Shai Hulud+100%
- Operation Dust Storm+100%
- SolarWinds Compromise+100%
- FortiBleedNEW
- PhaaS CampaignNEW
Country
- China+213%
- United States+76%
- Russia+58%
- India+97%
- Iran+104%
Cve
- CVE-2026-86218+1800%
- CVE-2026-41178+200%
- CVE-2026-19490+100%
- CVE-2026-63072+400%
- CVE-2026-31431+150%
Cwe
Eth
Industry
- Government+56%
- Technology+168%
- Manufacturing+70%
- Transportation+350%
- Healthcare+29%
Malware
- Mirai+800%
- Cobalt Strike+29%
- ClickFix+33%
- Glassworm+200%
- Shai-hulud+200%
Mitre Attack
Platform
- Windows+391%
- Microsoft Office Word+2800%
- Android+74%
- PHP+440%
- Gitlab+533%
Ransomware Group
- Qilin+100%
- Rhysida+200%
- Jadepuffer+60%
- The Gentlemen+100%
- Krybit+40%
Tool
- Claude+450%
- Docker+433%
- Chrome+138%
- Microsoft Teams+157%
- Google Drive+350%
Vulnerability
- XSS+263%
- Path Traversal+500%
- StyleSmuggler+300%
- Buffer overflow+133%
- MikroTrick+50%
Entity type distribution
| Entity type | Count |
|---|---|
| Cve | 2379 |
| Platform | 921 |
| Tool | 593 |
| Company | 476 |
| Vulnerability | 216 |
| Apt Group | 144 |
| Malware | 133 |
| Country | 116 |
| Mitre Attack | 113 |
| Campaign | 102 |
| Cwe | 67 |
| Ransomware Group | 65 |
| Industry | 59 |
| Attack Type | 46 |
| Eth | 4 |