MENA Daily Brief — Sep 20, 2026
Campaigns1 new · 2 fresh activitySee all campaigns →
Correlated OSINT activity, not confirmed attribution. State-change history is not stored — "new" (first seen) and "fresh activity" (latest report) are the windowed proxies.
Exploited in MENA0 newly relevant · 0 at P1See the full board →
Signals of MENA relevance — KEV listing, MENA OSINT mentions, ransomware leak-site activity, and tracked-actor linkage are NOT confirmed in-region exploitation. Prioritize, then verify against your own telemetry.
No freshly-mentioned or freshly-listed CVE in the last 48h out of 17 tracked. See /signals for the full board.
Ransomware1 claims · 7 over-indexingSee ransomware watch →
Leak-site claims, not confirmed breaches — metadata only.
New & Emerging136 first observedSee new & emerging →
First appearance in our MENA collection — new to Radar, not necessarily new to the world.
KEV0 new MENA-relevantSee the full KEV list →
Newly KEV-listed and cross-referenced to a MENA actor/case. KEV listing is not confirmed in-region exploitation.
No new MENA-relevant CISA KEV entries in the last 48h out of 12 tracked. See /kev for the full catalog; this section repopulates on the next ETL run if a new entry picks up a MENA signal.
Signals12 technique spikesSee Radar Signals →
12-week technique momentum (z-score), not a 72h delta — a spike in reporting volume, not confirmed targeting.
This brief covers the surfaces shipped to date. It is a routing layer, not a source — cite the underlying page (Campaigns, Exploited-in-MENA, Ransomware, Emerging, KEV, Signals) when reporting on any item above.