2026 ranking puts Recorded Future first among CTI providers
Mandiant and CrowdStrike place second and third; Kaspersky is flagged as jurisdiction-gated for Western buyers.
17
Product
WildFire
- Mentions · 7d2
- Mentions · 30d3
- All mentions8
- First seenAug 17, 2026
- Last mentioned21h ago
Timeline
8 articles · newest firstPalo Alto says PHP RCE flaws affect PAN-OS; hotfixes still pending
CVE-2026-109618 and CVE-2026-109619 hit several PAN-OS branches via management interfaces; Palo Alto reports no attacks on its products.
74
Top 10 Best Malware Analysis Tools in 2026 [Ranked & Scored]
A 2026 roundup ranks malware sandboxes and file-intelligence tools, led by context, interactive, and evasion-resistant analysis.
18
xHunt Campaign: New Watering Hole Identified for Credential Harvesting
Unit 42 tied the xHunt campaign to a watering hole on a Kuwait government website used to passively harvest visitors' NTLM credential hashes.
52
Threat Assessment: Ryuk Ransomware
Unit 42 assesses Ryuk ransomware amid a CISA/FBI/HHS alert on threats to U.S. healthcare, including the UHS attack that disrupted hospital operations.
68
Threat Brief: Maze Ransomware
Unit 42 issued a threat brief on Maze ransomware, noting an uptick across industries and exploitation of Pulse VPN and IE flaws for initial access.
55
Fake CVE-2023
A fake PoC for WinRAR RCE CVE-2023-40477 posted on GitHub actually deploys VenomRAT through a multi-step infection chain targeting researchers.
40
Locky Ransomware Installed Through Nuclear EK
Unit 42 reports Locky ransomware delivered through the Nuclear exploit kit using Flash exploits, adding a drive-by path to existing malspam distribution.
24
Related CVEs
by mentions- CVE-2019-11510100%10.0Unauthenticated Arbitrary File Read in Ivanti Pulse Connect Secure VPN
- CVE-2026-109619100%9.2Use-after-free RCE in PHP via stale request globals
- CVE-2026-109618100%9.2OOM longjmp memory flaw enabling RCE in PHP
- CVE-2018-487890%7.8Use-After-Free RCE in Adobe Flash Player before 28.0.0.161
- CVE-2018-1598290%7.8Use-After-Free in Adobe Flash Player Allows Arbitrary Code Execution
- CVE-2018-817488%7.5Out-of-Bounds Write RCE in Microsoft Windows VBScript Engine
- CVE-2023-2515785%9.8GeoServer: GeoServer includes support for the OGC Filter expression language and the OGC Common Query Language (CQL) as part of the Web…
- CVE-2023-4047711%7.8RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability
Appears with
- Palo Alto Networksvendor · 7
- Palo Alto Networksorganization · 6
- Unit 42organization · 5
- VirusTotalproduct · 2
- CrowdStrikevendor · 2
- Cortex XDRproduct · 2
- AutoFocusproduct · 2
- VMRayvendor · 1
- FBIorganization · 1
- whalersplonkthreat actor · 1
- xHuntthreat actor · 1
- MetaDefender Cloudproduct · 1
- Proofpointorganization · 1
- Kasperskyvendor · 1
- CISAorganization · 1
- Group-IBvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.