Cyber Threat Report: W/C September 14, 2026
653
Threat Clusters
4445
Articles Analyzed
51.0
Avg Threat Score
151
Rising Entities
Top threats
Critical Zero-Day Vulnerability in Cisco ISE Under Active Exploitation
89.0
Critical Zero-Day Vulnerability in Cisco Secure Email Gateway Exploited
82.3
Critical WSO2 API Manager Vulnerability Under Active Exploitation
80.8
Red Heron Exploits Gitea RCE Flaw in Multinational Campaign
80.7
Critical Linux Kernel Vulnerability CVE-2025-39682 Under Active Exploitation
80.3
AI-Driven Cyber Attacks Targeting Critical Infrastructure and Data Security
78.7
Critical Vulnerability in Issabel Framework Allows Remote Code Execution
78.0
Iranian State Actors Deploy CHOSEN BRICK Spyware Against Dissidents
78.0
Critical RCE Vulnerability in n8n Disclosed (CVE-2025-68613)
78.0
NightEagle APT Targets Russian Enterprises with Advanced Malware
77.9
China-Linked Hackers Target NGOs with Chrome and Windows Exploits
77.9
Russian State Actors Target IP Cameras for Espionage in NATO Countries
77.8
Ransomware leak sites this week
241 victim listings across 51 groups, from ThreatCluster's own collection of ransomware leak sites. Listings are claims by the groups, not confirmed breaches.Most-listed sectors: Manufacturing (41), Technology (35), Other (26), Professional Services (26), Not Found (22).
| Group | Listings |
|---|---|
| qilin | 33 |
| thegentlemen | 31 |
| auditteam | 12 |
| akira | 11 |
| metaencryptor | 11 |
| n0n | 11 |
| storm | 11 |
| safepay | 9 |
| emperador | 7 |
| incransom | 7 |
Ransomware tracker · Dark web API
Rising entities
Apt Group
- Salt Typhoon+150%
- Andariel+200%
- Insomnia+100%
- FamousSparrowNEW
- NightEagleNEW
Attack Type
- Ransomware+39%
- Malware+25%
- Brute Force+120%
- Command Injection+400%
- Cross-Site Scripting (xss)+100%
Campaign
Country
- Netherlands+1667%
- Russia+61%
- Ukraine+100%
- Iran+77%
- Poland+222%
Cve
- CVE-2026-85103+63%
- CVE-2026-53360+500%
- CVE-2026-46150+500%
- CVE-2026-16232+500%
- CVE-2026-64423+133%
Cwe
Eth
Industry
- Energy+93%
- Government+4%
- Agriculture+400%
- Financial+4%
- Retail+16%
Malware
- ClickFix+88%
- Amatera Stealer+500%
- Storm+500%
- JeetBot+300%
- Predator+300%
Mitre Attack
Platform
- Microsoft Edge+1670%
- Chromium+953%
- Telegram+355%
- MacOS+112%
- WhatsApp+242%
Ransomware Group
- Safepay+1400%
- Qilin+71%
- Akira+200%
- DragonForce+300%
- Clop+600%
Tool
- Google Chrome+959%
- Hugging Face+61%
- Gemini+163%
- Git+250%
- PowerShell+43%
Vulnerability
- OS Command Injection+67%
- Stored XSS+200%
- Cleo+100%
- Use After Free In DevTools+100%
- Moveit+100%
Entity type distribution
| Entity type | Count |
|---|---|
| Cve | 925 |
| Platform | 878 |
| Company | 627 |
| Tool | 534 |
| Malware | 181 |
| Vulnerability | 150 |
| Country | 127 |
| Mitre Attack | 105 |
| Campaign | 102 |
| Apt Group | 99 |
| Ransomware Group | 77 |
| Industry | 59 |
| Cwe | 56 |
| Attack Type | 42 |
| Eth | 22 |
| Btc | 1 |