Threat Roundup: May 2026

Table of Contents

Top Threats This Month

1. LockBit 4.0 Ransomware Campaign

LockBit 4.0 has improved encryption speed and new double-extortion. 47 MSPs hit this month through compromised RMM tools.

🔴 Critical

Verify ConnectWise and Kaseya are patched. LockBit 4.0 exploits known vulnerabilities in both.

2. Azure AD Credential Stuffing Wave

10 million blocked authentication attempts this month. Shared admin accounts are especially vulnerable.

3. Firmware Supply Chain Attack

Compromised firmware update for popular network switches allows remote code execution.

How to Defend