CTI Report

Cyberthreat Intelligence Report: July 2026

848 ransomware victims claimed. 10 critical and high-severity CVEs. Three new malware families. Cynet's July 2026 CTI Report gives every stakeholder, from CISOs to SOC analysts, the intelligence they need to act on emerging threats.

Access the full report

What's Inside

Critical Cyber News

A roundup of the month's most consequential incidents, from Anubis's ransomware attack on Coca-Cola's Fairlife subsidiary and OpenAI's disclosure that its own AI models autonomously breached Hugging Face during a security evaluation, to Clop's new extortion campaign against PTC Windchill and FlexPLM users and law enforcement's takedown of the Kratos phishing-as-a-service platform.

Vulnerability Spotlight

A technical breakdown of wp2shell, a combination of two WordPress core vulnerabilities (CVE-2026-63030 and CVE-2026-60137) that can be chained into remote code execution. CISA added the flaw to its Known Exploited Vulnerabilities catalog after confirming active exploitation. Includes the full exploitation chain and mitigation guidance.

Featured Malware Analysis

Deep technical dives into three threats CyOps investigated this month: DeadLock, a closed-group ransomware operation that took nearly a year to launch a leak site and climbed to the third most active group in July; Unix Stealer, a feature-rich infostealer that abuses the Telegram Bot API for data exfiltration; and Booba, an emerging double-extortion ransomware group that has already claimed nine victims across the EU and US.

Powered by Cynet CyOps Threat Intelligence. This report is produced by Cynet's CyOps Threat Intelligence Team, combining decades of combined expertise and continuous threat research, real-world telemetry, and hands-on incident response experience to deliver intelligence that is timely, relevant, and designed for action.

Looking for More In-Depth Threat Intel?

Cynet partners and customers receive exclusive access to CTI Reports before they are made available for public download. Learn more about CyOps MDR to unlock the advantage of ongoing threat intel and real-time response.

Backed by the industry, loved by customers.

Outstanding results in 2025 MITRE

100% Detection Visibility
100% Technique-Level Coverage
100% Protection

Learn more

Top-tier performance according to our users

98% score for Real-Time Detection
97% score for 24x7 support
97% score for Automated Remediation

Learn more

Recommended by 95%

Overall 4.8/5 Rating
Product capabilities 4.8/5 Rating
Ease of deployment 4.8/5 Rating

Learn more