Threat Intelligence Research. Our Own Findings.
Deep dives into live threats: exploited vulnerabilities, ransomware entry points and supply chain compromises.
Threat Intelligence Researches KEV weakness classes: which CWEs recur, 2024 to 2026 Which weaknesses recur in 686 CISA KEV entries added 2024 to 2026: command injection leads, injection is 20.8 percent, and 25.7 percent list no CWE. 
Threat Intelligence Researches KEV additions 2024 to 2026 by product type Of the 686 entries added to the CISA Known Exploited Vulnerabilities (KEV) catalog from 2024 to 2026 (catalogVersion 2026.10.08), operating systems and mobile platforms are the… 
Threat Intelligence Researches Threat intelligence priorities for 2027: agency outlooks What the NCSC and ENISA say defenders should watch toward 2027: exploitation timing, AI-assisted vulnerability research and AI attack surface, as checks. 
Threat Intelligence Researches Hacktivism and DDoS in 2025: ENISA’s top groups ENISA's 2026 threat report, covering 1 January to 31 December 2025, names a small set of hacktivist groups behind most claimed ideology-driven activity in the EU.… 
Threat Intelligence Researches NIST CSF 2.0: the six functions explained NIST CSF 2.0 has six functions: Govern, Identify, Protect, Detect, Respond and Recover. Each one's NIST definition and categories, as listed in CSWP 29. 
Threat Intelligence Researches Exploited vulnerabilities in 2025: what ENISA reports This is a short list of what ENISA reports about exploited vulnerabilities in 2025. It draws on chapter 7 and the overview of the ENISA Threat… 
Threat Intelligence Researches CVSS, EPSS and CISA KEV: what each signal tells you Which of CVSS, EPSS and the CISA KEV catalogue tells you what? Who runs each signal, what it measures, what it leaves out, and a question… 
Threat Intelligence Researches AI cyber threats in 2026: what the FBI and ENISA report The FBI IC3 and ENISA both report AI use in fraud, deepfakes and intrusions. Here are six themes, plus ENISA's 'highly likely' and 'likely' outlook. 
Threat Intelligence Researches ENISA 2026: ClickFix, Smishing and Phishing Kit Trends This list covers the phishing and social engineering trends in the ENISA Threat Landscape 2026, published in September 2026. The report analyses incidents recorded from 1… All 19 pages
Questions About Threat Intelligence Researches.
Last updated June 9, 2026-
Research articles on exploited vulnerabilities, ransomware entry points, supply chain compromises and attacker methods, with the newest first.
-
New research is added several times a month. Every article shows its date.
-
Type a word in the search box or pick a year. The count above the list updates as you filter.
-
CISA maintains the Known Exploited Vulnerabilities Catalog, linked here.
-
Threat Intelligence Researches holds Brandefense's own findings on live threats. Security News explains regulation, standards and official guidance.
-
Brandefense is an AI-driven threat intelligence company. Its platform covers cyber threat intelligence, digital risk protection and external attack surface management. You can request a demo on your own domain from the Request A Demo page.
-
The page lists 160 items. You can filter by year, from 2022 to 2026. The newest come first.
-
They give dates, fixes, attribution and what to check. Topics include exploited vulnerabilities, ransomware entry points and supply chain compromises.
-
Yes. One article covers five VPN and firewall flaws added to the CISA KEV catalog in 2025 and 2026 that carry a ransomware flag. It gives dates, fixed versions and what to check.
-
Yes. One article covers remote support and file transfer flaws that CISA flagged for ransomware use in 2025 and 2026. It gives dates, fixes, attribution and checks.
Research Is General. Your Exposure Is Not.
A demo of the platform, run on your own domain.