Charts
Every chart names its source, the date it was retrieved and its licence, and ships with the underlying numbers as a table and a CSV.
3 charts on Cyberstrategy · Across the network
Additions to the CISA KEV catalog per month. Listing means confirmed exploitation, not merely a severe score.
View as table
| Period | KEV additions (vulnerabilities) |
|---|---|
| 2021-11-01 | 291.0 |
| 2021-12-01 | 20.0 |
| 2022-01-01 | 40.0 |
| 2022-02-01 | 32.0 |
| 2022-03-01 | 226.0 |
| 2022-04-01 | 45.0 |
| 2022-05-01 | 83.0 |
| 2022-06-01 | 48.0 |
| 2022-07-01 | 3 |
| 2022-08-01 | 23.0 |
| 2022-09-01 | 24.0 |
| 2022-10-01 | 12.0 |
| 2022-11-01 | 10.0 |
| 2022-12-01 | 9 |
| 2023-01-01 | 5 |
| 2023-02-01 | 14.0 |
| 2023-03-01 | 18.0 |
| 2023-04-01 | 17.0 |
| 2023-05-01 | 19.0 |
| 2023-06-01 | 24.0 |
| 2023-07-01 | 16.0 |
| 2023-08-01 | 8 |
| 2023-09-01 | 19.0 |
| 2023-10-01 | 18.0 |
| 2023-11-01 | 18.0 |
| 2023-12-01 | 11.0 |
| 2024-01-01 | 21.0 |
| 2024-02-01 | 9 |
| 2024-03-01 | 10.0 |
| 2024-04-01 | 10.0 |
| 2024-05-01 | 14.0 |
| 2024-06-01 | 9 |
| 2024-07-01 | 14.0 |
| 2024-08-01 | 19.0 |
| 2024-09-01 | 25.0 |
| 2024-10-01 | 17.0 |
| 2024-11-01 | 22.0 |
| 2024-12-01 | 16.0 |
| 2025-01-01 | 14.0 |
| 2025-02-01 | 27.0 |
| 2025-03-01 | 32.0 |
| 2025-04-01 | 15.0 |
| 2025-05-01 | 24.0 |
| 2025-06-01 | 20.0 |
| 2025-07-01 | 20.0 |
| 2025-08-01 | 15.0 |
| 2025-09-01 | 16.0 |
| 2025-10-01 | 31.0 |
| 2025-11-01 | 11.0 |
| 2025-12-01 | 20.0 |
| 2026-01-01 | 17.0 |
| 2026-02-01 | 28.0 |
| 2026-03-01 | 26.0 |
| 2026-04-01 | 31.0 |
| 2026-05-01 | 21.0 |
| 2026-06-01 | 23.0 |
| 2026-07-01 | 26.0 |
| 2026-08-01 | 31.0 |
| 2026-09-01 | 24.0 |
Source: CISA · retrieved 17 Sep 2026 · Public domain (US Government)
How long vulnerabilities take to reach the KEV catalog after publication — a distribution, not an average.
Source: CISA / NVD · retrieved 17 Sep 2026 · Public domain (US Government)
Victims claimed on extortion leak sites, by sector and month. These are claims made by the groups, not confirmed incidents.
- Manufacturing
- Not Found
- Healthcare
- Other sectors
- Professional Services
- Technology
- Transportation
- Agriculture and Food Production
- Financial Services
- Retail & E-Commerce
- qilin
- krybit
- safepay
- thegentlemen
- akira
- BrainCipher
- Storm
- incransom
- lockbit5
- metaencryptor
- play
- shinyhunters
- Falcon
- direwolf
- SilentRansomGroup
- AuditTeam
- chaos
- insomnia
- Orova
- spacebears
- Wallstreet
- emperador
- everest
- medusalocker
- DYSPHOR1A
- Eclipse
- gunra
- majinahanashi
- anubis
- aurora
- Dark Project
- iah6477
- Panzer
- Vexy Ransomware
- Booba Project
- dragonforce
- Global Secret Group
- rhysida
- ShadowByt3$
- unsafe
View as table
| Period | Manufacturing (postings) | Not Found (postings) | Healthcare (postings) | Other sectors (postings) | Professional Services (postings) | Technology (postings) | Transportation (postings) | Agriculture and Food Production (postings) | Financial Services (postings) | Retail & E-Commerce (postings) | qilin (postings) | krybit (postings) | safepay (postings) | thegentlemen (postings) | akira (postings) | BrainCipher (postings) | Storm (postings) | incransom (postings) | lockbit5 (postings) | metaencryptor (postings) | play (postings) | shinyhunters (postings) | Falcon (postings) | direwolf (postings) | SilentRansomGroup (postings) | AuditTeam (postings) | chaos (postings) | insomnia (postings) | Orova (postings) | spacebears (postings) | Wallstreet (postings) | emperador (postings) | everest (postings) | medusalocker (postings) | DYSPHOR1A (postings) | Eclipse (postings) | gunra (postings) | majinahanashi (postings) | anubis (postings) | aurora (postings) | Dark Project (postings) | iah6477 (postings) | Panzer (postings) | Vexy Ransomware (postings) | Booba Project (postings) | dragonforce (postings) | Global Secret Group (postings) | rhysida (postings) | ShadowByt3$ (postings) | unsafe (postings) |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2026-08-01 | 6 | 3 | 1 | 2 | 3 | 3 | — | — | 2 | 5 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — | — |
| 2026-08-31 | — | — | — | — | — | — | — | — | — | — | 19.0 | — | — | 18.0 | 7 | — | — | 7 | 5 | — | 4 | 4 | 3 | 3 | — | — | 3 | — | — | — | 2 | 2 | — | — | — | — | — | 2 | — | — | — | 2 | — | — | — | — | — | — | 2 | — |
| 2026-09-01 | 21.0 | 9 | 6 | 35.0 | 11.0 | 12.0 | 6 | 6 | 4 | 9 | 15.0 | 14.0 | — | 4 | 7 | 8 | — | 7 | 6 | — | 4 | 2 | — | 6 | — | — | — | — | 4 | — | 3 | — | 3 | — | — | — | — | 3 | — | — | — | 2 | — | — | — | — | — | — | — | — |
| 2026-09-02 | — | — | — | — | — | — | — | — | — | — | 6 | 14.0 | — | 5 | 10.0 | 8 | — | 12.0 | 6 | — | 4 | — | — | 7 | — | — | — | — | — | — | 4 | — | 3 | 2 | — | 2 | — | — | — | 2 | — | — | — | — | — | — | 2 | — | — | — |
| 2026-09-03 | — | — | — | — | — | — | — | — | — | — | 4 | 15.0 | — | 5 | 7 | 8 | 8 | 11.0 | 3 | — | 4 | — | — | 5 | 4 | — | — | — | — | — | 4 | — | 3 | 2 | — | — | — | — | — | — | — | — | — | 2 | — | — | — | — | — | — |
| 2026-09-04 | — | — | — | — | — | — | — | — | — | — | 7 | 15.0 | — | — | 8 | 8 | 8 | 8 | — | — | — | — | — | 6 | 7 | — | — | — | — | 3 | 3 | — | 3 | 2 | — | — | 2 | — | — | — | — | — | 2 | 5 | — | — | — | — | — | — |
| 2026-09-05 | — | — | — | — | — | — | — | — | — | — | 12.0 | 15.0 | — | 5 | 6 | — | 8 | 4 | 3 | — | — | — | — | 6 | 8 | — | — | — | — | 4 | 3 | — | — | — | 2 | — | 2 | — | — | 2 | — | — | — | 6 | — | — | — | — | — | — |
| 2026-09-06 | — | — | — | — | — | — | — | — | — | — | 12.0 | 6 | — | 5 | 6 | — | 8 | — | 3 | — | — | — | — | 9 | 8 | — | — | — | — | 4 | 3 | — | — | — | 3 | — | — | — | — | 2 | — | — | 4 | 7 | — | 2 | — | — | — | — |
| 2026-09-07 | — | — | — | — | — | — | — | — | — | — | 13.0 | — | — | 4 | 5 | — | 3 | 2 | 3 | 4 | — | — | — | 10.0 | 7 | — | — | — | — | 4 | — | — | 3 | — | 3 | — | — | — | — | — | 2 | — | 4 | 9 | — | — | — | — | — | — |
| 2026-09-08 | — | — | — | — | — | — | — | — | — | — | 10.0 | — | 10.0 | 21.0 | 4 | — | — | — | 3 | 4 | — | — | — | 10.0 | — | 3 | 2 | — | — | — | — | — | 3 | — | 3 | — | — | — | — | — | 3 | — | 3 | 4 | — | — | — | 2 | — | — |
| 2026-09-10 | — | — | — | — | — | — | — | — | — | — | 5 | — | 10.0 | 18.0 | 5 | — | 4 | 3 | 4 | 4 | — | — | — | 8 | — | 7 | — | — | — | — | — | 3 | 3 | — | — | — | — | — | — | — | 4 | — | 2 | 3 | — | — | — | — | — | — |
| 2026-09-11 | — | — | — | — | — | — | — | — | — | — | 4 | — | 10.0 | 13.0 | 8 | — | 4 | — | 5 | — | 4 | — | — | 5 | — | 9 | 3 | — | — | — | 3 | 4 | — | — | — | — | — | — | — | — | 4 | — | — | 3 | — | — | — | 4 | — | — |
| 2026-09-12 | — | — | — | — | — | — | — | — | — | — | 5 | — | 11.0 | 7 | 8 | — | 4 | — | 6 | — | 4 | — | — | 6 | — | 9 | 3 | — | — | — | 3 | 4 | — | — | — | — | — | — | — | — | 4 | — | 4 | — | — | — | — | 4 | — | — |
| 2026-09-13 | — | — | — | — | — | — | — | — | — | — | 4 | 12.0 | 11.0 | — | 7 | — | — | — | 5 | — | 4 | — | — | 4 | — | 8 | 3 | — | — | — | 3 | 5 | — | 4 | — | — | — | — | — | — | — | — | 4 | 3 | — | — | — | 4 | — | — |
| 2026-09-14 | — | — | — | — | — | — | — | — | — | — | 5 | 13.0 | 11.0 | — | 5 | — | — | — | 3 | — | 4 | — | — | 4 | — | 7 | 3 | — | — | — | 3 | 6 | — | 4 | — | — | — | — | — | — | — | — | 5 | 3 | — | — | — | 3 | — | — |
| 2026-09-15 | — | — | — | — | — | — | — | — | — | — | 10.0 | 13.0 | — | — | 4 | — | — | — | 6 | — | — | — | — | — | — | 6 | 4 | — | — | — | 3 | 6 | — | 4 | — | — | — | — | 2 | — | — | — | 4 | 3 | — | — | — | 3 | 2 | 2 |
| 2026-09-16 | — | — | — | — | — | — | — | — | — | — | 15.0 | 6 | 8 | 30.0 | 4 | — | 3 | — | 3 | 2 | — | — | — | — | — | 4 | 2 | 2 | — | — | — | — | — | — | — | — | — | — | — | — | — | — | 2 | 2 | 2 | — | — | — | — | 2 |
Source: ransomware.live · retrieved 16 Sep 2026 · Commercial use prohibited without publisher permission
Leak-site postings are claims made by ransomware groups, not confirmed or verified incidents.