Cyber Threat Report: W/C September 7, 2026
136
Threat Clusters
534
Articles Analyzed
54.7
Avg Threat Score
126
Rising Entities
Top threats
China-Linked Fire Ant Campaign Targets Cisco Routers for Espionage
80.7
Critical RCE Vulnerability in N-able N-central Requires Immediate Patching
80.2
Critical CVE-2026-86218 Vulnerability in N-able N-central
79.5
Critical FreeIPA Vulnerabilities Allow Unauthenticated Admin Access
78.0
PEEP Chrome Extension Turns Browsers Into Remote Access Tools
75.8
Critical Vulnerabilities in N-able N-central Expose Managed Services to Attacks
75.8
Multiple Critical CVEs Exploited in Cybersecurity Attacks
74.6
Advanced PHP Web Shell Exploits F5 BIG-IP Systems
74.6
Active Exploitation of Magento Zero-Day and Chromium Backdoors
74.0
New ScreenConnect Flaw Enables Malware Spread via Rogue Clients
74.0
Critical OVERPASS Vulnerability in SAP Kernel Exposed
73.5
Emergency Chrome Update Issued for Zero-Day Vulnerability CVE-2026-85046
72.9
Ransomware leak sites this week
66 victim listings across 22 groups, from ThreatCluster's own collection of ransomware leak sites. Listings are claims by the groups, not confirmed breaches. Most-listed sectors: Manufacturing (11), Retail & E-Commerce (8), Professional Services (8), Not Found (7), Other (7).
| Group | Listings |
|---|---|
| thegentlemen | 19 |
| direwolf | 6 |
| metaencryptor | 4 |
| akira | 3 |
| auditteam | 3 |
| dark project | 3 |
| everest | 3 |
| lockbit5 | 3 |
| qilin | 3 |
| aurora | 2 |
Ransomware tracker · Dark web API
Rising entities
Apt Group
- Kimsuky+167%
- Unc3886+100%
- Midnight BlizzardNEW
- CinderNEW
- Unc6671NEW
Attack Type
Campaign
Company
- Mathspace+700%
- Metabase+150%
- ConnectWise+300%
- Google Cloud Platform+200%
- Blockstream+200%
Country
- New Zealand+400%
- Vietnam+100%
- Wales+100%
- PalauNEW
- GeorgiaNEW
Cve
- CVE-2026-86218+1600%
- CVE-2026-63072+400%
- CVE-2026-64384+200%
- CVE-2026-53189+200%
- CVE-2026-64277+200%
Cwe
Industry
- Professional Services+200%
- Pharmaceuticals+200%
- Construction+100%
- Oil and GasNEW
- Real EstateNEW
Malware
- Glassworm+200%
- GameOver Zeus+100%
- XMRig+100%
- Mirai+100%
- PEEPNEW
Mitre Attack
Platform
- PHP+200%
- Liquid Network+167%
- Tor+25%
- Magento+50%
- Edge+50%
Ransomware Group
- TheGentlemen+50%
- Cryptolocker+100%
- Vexy Ransomware+100%
- MetaEncryptorNEW
- DirewolfNEW
Entity type distribution
| Entity type | Count |
|---|---|
| Cve | 1590 |
| Platform | 237 |
| Tool | 166 |
| Company | 159 |
| Mitre Attack | 64 |
| Vulnerability | 57 |
| Malware | 48 |
| Country | 46 |
| Cwe | 36 |
| Industry | 31 |
| Campaign | 27 |
| Apt Group | 22 |
| Attack Type | 21 |
| Ransomware Group | 19 |