Cyber Threat Report: W/C September 28, 2026
1143
Threat Clusters
4226
Articles Analyzed
43.0
Avg Threat Score
156
Rising Entities
Top threats
Citrix NetScaler Critical Vulnerabilities Exploited: Urgent Patching Required
85.8
Critical Zero-Day Vulnerabilities in Citrix NetScaler Under Active Exploitation
82.3
Critical Citrix NetScaler Zero-Day Vulnerabilities Exploited
82.3
NetScaler Zero-Days Actively Exploited: Immediate Action Required
81.8
Critical Citrix NetScaler Zero-Days Exploited Amid $387M Crypto Hack
81.0
Citrix NetScaler Vulnerabilities Under Active Exploitation
80.8
Critical Authentication Bypass in Cisco Catalyst SD-WAN Manager Exploited
80.3
Critical Citrix NetScaler Zero-Day Vulnerabilities Exploited
80.0
Critical Authentication Bypass in Rejetto HFS Exploited Within 24 Hours
80.0
Critical Citrix NetScaler Vulnerabilities Actively Exploited in Finland
80.0
Critical XSS Vulnerability in SUSE Rancher Exposes Admin Sessions
80.0
Critical Zero-Day Exploits in Citrix NetScaler Confirmed by CISA
80.0
Ransomware leak sites this week
284 victim listings across 51 groups, from ThreatCluster's own collection of ransomware leak sites. Listings are claims by the groups, not confirmed breaches.Most-listed sectors: Manufacturing (54), Healthcare (40), Technology (34), Other (28), Not Found (28).
| Group | Listings |
|---|---|
| thegentlemen | 34 |
| safepay | 22 |
| qilin | 17 |
| storm | 15 |
| lamashtu | 14 |
| incransom | 10 |
| akira | 9 |
| emperador | 9 |
| krybit | 9 |
| braincipher | 8 |
Ransomware tracker · Dark web API
Rising entities
Apt Group
- ShinyHunters+160%
- APT29+50%
- Volt Typhoon+100%
- TA419New
- Star BlizzardNew
Attack Type
- Zero-day Exploit+51%
- Ransomware+50%
- Denial of Service+540%
- Phishing+13%
- Malware+14%
Btc
Campaign
- Matryoshka+50%
- Drift+100%
- Operation Epic Fury+100%
- Operation KillSwitchNew
- Operation Economic OutcastNew
Country
- United States+173%
- Russia+165%
- China+203%
- Iran+244%
- Ukraine+217%
Cve
- CVE-2026-88771+856%
- CVE-2026-88772+778%
- CVE-2026-88773+467%
- CVE-2026-65660+300%
- CVE-2026-88778+400%
Cwe
Eth
Industry
- Government+45%
- Energy+237%
- Financial+124%
- Technology+79%
- Telecommunications+79%
Malware
- DarkSword+200%
- Vshell+100%
- PegasusNew
- NeedyMantisNew
- CloudSyncDNew
Mitre Attack
Platform
- Linux+164%
- MacOS+71%
- Citrix NetScaler ADC+1050%
- Windows+16%
- IOS+87%
Ransomware Group
- Qilin+150%
- Conti+67%
- Jadepuffer+200%
- BrainCipher+200%
- Threeam+100%
Tool
- Hugging Face+47%
- OneDrive+900%
- Google Cloud+433%
- Openssl+300%
- Microsoft Teams+600%
Vulnerability
- Citrix NetScaler+450%
- Path Traversal+30%
- Spectre+67%
- OS Command Injection+100%
- Meltdown+200%
Entity type distribution
| Entity type | Count |
|---|---|
| Cve | 2338 |
| Company | 1106 |
| Platform | 787 |
| Tool | 414 |
| Country | 184 |
| Malware | 150 |
| Campaign | 144 |
| Industry | 106 |
| Vulnerability | 98 |
| Mitre Attack | 77 |
| Attack Type | 69 |
| Apt Group | 68 |
| Cwe | 43 |
| Ransomware Group | 40 |
| Btc | 15 |
| Eth | 6 |