Black Kite’s latest scans found critical vulnerabilities and stealer-log findings remained visible across many affected organizations. The report covers disclosures between April 1, 2025, and March 31, 2026, and includes known or reliably estimated annual revenue for more than 6,000 victims.

CertiK released the CertiK Hack3D: H1 2026 Report, a data-driven analysis of Web3 security incidents from January through June 2026. Across 344 incidents, the ecosystem lost $1.31 billion, with adjusted net losses of approximately $1.2 billion after frozen and recovered funds.

The Forum of Incident Response and Security Teams (FIRST) released its 2026 Mid-Year Vulnerability Forecast, revealing that actual CVE disclosures are already running 46.3% above the projections published just four months ago. The updated 2026 forecast now projects approximately 66,000 CVEs for the full year, up from the February median of 59,427.

search_response='1. CrowdStrike 2026 Threat Hunting Report: AI is Now Embedded Across Modern Adversary Operations\nURL: https://investor.wedbush.com/wedbush/article/bizwire-2026-8-3-crowdstrike-2026-threat-hunting-report-ai-is-now-embedded-across-modern-adversary-operations\nDate: 2026-08-03T07:01:00.000Z\nHighlights: CrowdStrike(NASDAQ: CRWD) today released the 2026 Threat Hunting Report, revealing that AI is now embedded across modern adversary operations. China-nexus adversaries exploited cri

{ "id": "a8a3da80-b77c-4874-a81f-8f5873eebb6b", "results": [ { "date": "2026-07-30", "last_updated": "2026-08-02", "snippet": "Ransomware Incidents\n28,977\nTop actor:nova\nDefacements\n577\nTop notifier:M@rAz Ali\nCVEs (last 30d)\n7,428\nTop severity:unknownvs previous periodView all\nLast 24 Hours\n5\nBreakdown:4 RW \u00b7 1 DF \u00b7 0 CVE\n### Global threat map\n...\nLast 30 daysRiskLow \u2192 High\n...\nComposite score across all sources\nAll- \ud83c\udde6\ud83c\ud

Report on a massive data exposure event affecting a major cloud service provider's customer metadata, impacting approximately 2.1 million records.

A zero-day vulnerability impacting major enterprise VPN vendors identified in late July, allowing unauthenticated remote code execution.

On July 17, 2026, CISA added CVE-2026-58644, a critical remote code execution vulnerability in Microsoft SharePoint, to its Known Exploited Vulnerabilities catalog.

On July 20, 2026, health tech firm Craneware reported a cyberattack resulting in the exposure of a significant volume of customer and employee data.

A report published on July 24, 2026, indicates a 24.9% year-over-year increase in publicly disclosed ransomware incidents, totaling 7,551 cases in the first half of 2026.

On July 14, 2026, Microsoft released patches for 622 security flaws, marking its largest Patch Tuesday to date. This update includes fixes for two zero-day vulnerabilities actively exploited in the wild.

{ "id": "a25afbd4-6aa1-42ac-8006-2fa8cb5e0e81", "results": [ { "date": "2026-07-28", "last_updated": "2026-08-02", "snippet": "Ransomware Incidents\n28,977\nTop actor:nova\nDefacements\n577\nTop notifier:M@rAz Ali\nCVEs (last 30d)\n7,428\nTop severity:unknownvs previous periodView all\nLast 24 Hours\n5\nBreakdown:4 RW \u00b7 1 DF \u00b7 0 CVE\n### Global threat map\n...\nLast 30 daysRiskLow \u2192 High\n...\nComposite score across all sources\nAll- \ud83c\udde6\ud83c\ud

Updated financial forecast indicating a shift in enterprise budget allocation toward AI-driven threat detection and automated incident response tools.

Disclosure of a critical RCE vulnerability affecting top-tier enterprise VPN gateways, allowing unauthenticated attackers to bypass MFA.

On July 20, 2026, Ernst & Young (EY) disclosed a cyberattack that compromised sensitive customer data, including tax-related information.

SonicWall disclosed two zero-day vulnerabilities (CVE-2026-15409 and CVE-2026-15410) in its SMA 1000 devices, which have been actively exploited by attackers.

The Black Kite 2026 Ransomware Report reveals a 24.9% year-over-year increase in publicly disclosed ransomware victims, totaling 7,551 incidents in the first half of 2026.

On July 14, 2026, Microsoft released security updates addressing 622 vulnerabilities, including two zero-day flaws actively exploited in the wild.

On July 27, 2026, Microsoft introduced Project Perception, featuring the MAI-Cyber-1-Flash model, to enhance organizational defense against cyber threats.

Scottish health tech firm Craneware reported a cyberattack on July 20, 2026, leading to the exposure of substantial customer and employee data.

SonicWall disclosed two zero-day vulnerabilities (CVE-2026-15409 and CVE-2026-15410) in its SMA 1000 devices, with active exploitation reported.

On July 14, 2026, Microsoft addressed 570 security vulnerabilities, including two zero-day flaws actively exploited in the wild.

{ "id": "aeeecd36-7aea-41a5-8b08-5af906f94449", "results": [ { "date": "2026-07-28", "last_updated": "2026-08-02", "snippet": "Ransomware Incidents\n28,977\nTop actor:nova\nDefacements\n577\nTop notifier:M@rAz Ali\nCVEs (last 30d)\n7,428\nTop severity:unknownvs previous periodView all\nLast 24 Hours\n5\nBreakdown:4 RW \u00b7 1 DF \u00b7 0 CVE\n### Global threat map\n...\nLast 30 daysRiskLow \u2192 High\n...\nComposite score across all sources\nAll- \ud83c\udde6\ud83c\ud

Summary of two major retail data breaches impacting an estimated 3.2 million customer records finalized in investigation reports last week.