IT threat evolution in Q2 2026. Non-mobile statistics

Kaspersky's latest quarterly report highlights a surge in ransomware activity, noting that over 71,000 users were targeted in Q2 2026. A significant portion of these attacks leveraged specific vulnerabilities: CISA confirmed active exploitation of the BlueHammer local privilege escalation flaw in Microsoft Defender (CVE-2026-33825), while Check Point linked zero-day attacks in its Remote Access products (CVE-2026-50751) directly to the Qilin ransomware group. The study also details how the PayoutsKing threat actor is abusing the legitimate QEMU emulator to hide Alpine Linux virtual machines for credential theft, evading standard security monitoring.