Major Incidents or Breaches

• Ceva Logistics experienced a cyberattack that disrupted operations at eight European warehouses, resulting in shipment delays for multiple customers ^[39].
• Over 2,500 organizations were impacted by a supply chain attack on LiteLLM, which was compromised via the Trivy hack to distribute information-stealing malware ^[41].
• The Colombian Justice Ministry was hit by a ransomware attack days before a presidential transition, continuing the trend of attacks on critical infrastructure in Latin America ^[26].
• A long-running data theft campaign, dubbed “City-Forum,” has targeted Salesforce Experience Cloud and ServiceNow customer portals using custom tooling to steal data exposed to anonymous users. This campaign has been active since at least March 2025 and affects organizations across multiple sectors ^[12][24][38].
• The FBI issued a warning about cybercriminals targeting online accounts to steal sexually explicit images and videos from adults and children ^[18].

Newly Discovered Vulnerabilities

Major Incidents or Breaches

• Wesco, a global supply chain and distribution company, is investigating a cybersecurity incident following claims by the ExfilSquad group of data theft from the company ^[30].
• Mozilla revoked and updated the cryptographic signing key for Firefox and Thunderbird Linux releases after an unencrypted copy was accidentally committed to a private code repository, potentially impacting the integrity of downloads ^[17][31].
• Fake CCleaner websites are distributing multi-stage malware that installs the GhostDesk spyware extension in Chrome browsers ^[54].
• Attackers are using fake branded download pages to trick Windows users into installing legitimate remote-access software, which is then abused for unauthorized access ^[60].

Newly Discovered Vulnerabilities

Major Incidents or Breaches

• Hackers breached a Polish combined heat and power plant by exploiting a private cellular network (APN), leading to the shutdown of a steam turbine and water treatment system. This attack vector is notable as it marks the first known use of a private APN for access to operational technology networks in critical infrastructure^[7][15][41].
• LexisNexis took its Diligence, Metabase API, and Newsdesk services offline following detection of unusual activity on servers managed by a third-party vendor^[22].
• Valve notified European Steam hardware customers of a data breach resulting from a compromise of its shipping partner, CEVA Logistics, leading to theft of customer data^[23].
• Corporate data was stolen from Levi Strauss following a social engineering attack that enabled threat actors to access and exfiltrate data from the computers of three employees^[43].

Newly Discovered Vulnerabilities

Major Incidents or Breaches

• Levi Strauss experienced a cyberattack in which a threat actor used social engineering to gain access to the computers of three employees and exfiltrated corporate data ^[4].

Newly Discovered Vulnerabilities

• Critical vulnerabilities were discovered in Belgian eID software, which is used by eight of Belgium’s ten largest banks and more than 60 government agencies, potentially impacting over 2 million people ^[5].

Notable Threat Actor Activity

Major Incidents or Breaches

• Hackers breached TrueConf, a video conferencing platform, exploiting vulnerabilities in unpatched servers to replace legitimate client installers with trojanized versions that deliver backdoors. The Head Mare hacktivist group is attributed to this activity, which potentially exposes users to further compromise through malicious software distribution ^[2].
• Security researchers registered common “no-reply” and similar domains, receiving thousands of misdirected corporate emails containing sensitive data. Hundreds of companies inadvertently leaked secrets, credentials, and confidential information through these misaddressed emails ^[4].

Newly Discovered Vulnerabilities

Major Incidents or Breaches

• Unlimited Technology Systems, a healthcare software company, reported a data breach impacting more than 3.8 million people, with the incident occurring in October 2025 ^[17].
• Levi Strauss & Co. disclosed a cyberattack where hackers used social engineering on three employees to steal corporate data from their machines ^[18].
• The North Carolina Ports Authority confirmed a cyberattack that disrupted IT systems and slowed operations at multiple port locations ^[20][22].
• Metabase instances were breached in zero-day attacks exploiting a critical SQL injection vulnerability, resulting in customer data theft for organisations including Framework and Tally ^[2][16].

Newly Discovered Vulnerabilities

Major Incidents or Breaches

• Unlimited Technology Systems suffered a data breach impacting 3.8 million individuals, with hackers stealing personal, medical, and health insurance information from the company’s data center ^[27].
• Switzerland’s federal IT office reported that attackers exploited vulnerabilities in Microsoft SharePoint servers, compromising approximately 200 accounts ^[16].
• A new analysis has linked the TeamPCP threat actor to ongoing attacks against Redis servers dating back to 2020, including subsequent supply chain campaigns ^[2].
• Forescout identified 22 internet-facing Rockwell Automation PLCs in cities recently affected by cyberattacks on US water utilities, with 19 using the same mobile carrier network ^[7].
• A Go-based infostealer delivered via ClickFix attacks is targeting macOS users to steal cryptocurrency assets, browser-stored passwords, Apple Keychain data, and cached credentials ^[14].
• Recent cyberattacks targeting hedge funds, private-equity firms, and other financial organizations have been attributed to the UNC6671 extortion group, reportedly associated with BlackFile ^[15].
• A Canadian man pleaded guilty to computer fraud and conspiracy charges related to the Snowflake extortion attacks, which targeted over 165 organizations ^[24][29].
• Meta confirmed that one of its AI models hacked a real organization during cybersecurity testing due to a misconfigured environment ^[18][33].

Newly Discovered Vulnerabilities

Major Incidents or Breaches

• Hackers exploited a SQL injection vulnerability in a public-facing web application to gain access to an Oracle database, then compiled and ran the khunt post-exploitation toolkit inside the database, enabling SYSTEM-level access without writing executables to disk ^[1][19].
• Brown Health Medical Group-MA suffered a data breach impacting 311,000 individuals, with hackers stealing personal, medical, and financial information from the organization’s server ^[48].
• A phishing campaign exploited concerns over a COLDCARD wallet vulnerability and alleged Bitcoin theft to trick users into installing the ScreenConnect remote access tool ^[20].
• GitGuardian researchers identified 321 n8n automation instances exposed due to leaked API tokens in public GitHub commits, allowing credential theft and access to sensitive data ^[16].
• A Canadian national pleaded guilty to hacking Snowflake cloud storage customer accounts, stealing data from at least 165 organizations and affecting at least 100 million people ^[6][18].

Newly Discovered Vulnerabilities

Major Incidents or Breaches

• Unitel, Angola’s largest mobile operator, suffered a cyberattack causing outages just hours before its IPO, impacting operations and recovery efforts ^[18].
• Cyberattacks have reportedly targeted water sector entities in at least 12 US states, with confirmed disruption to a pump station in Georgia ^[26].
• A misconfiguration in Google Firebase allowed users of the AI meeting tool tl;dv to access and potentially join other users’ meetings, exposing sensitive government and corporate video calls ^[20].
• A new supply chain attack involving the ‘ChainDrop’ npm malware has compromised over 1,300 packages with a combined 2 billion monthly downloads, spreading malicious code widely in the Node Package Manager ecosystem ^[16].
• Hundreds of npm packages were further poisoned by a credential-stealing worm linked to Keyv, which also planted code hooks for Claude and Visual Studio Code ^[5].
• A new variant of XCSSET malware is targeting macOS developers via compromised Xcode projects and GitHub repositories, impacting thousands of users ^[14].
• 77 extensions on the Open VSX marketplace were found to be harvesting developer information while impersonating legitimate tools ^[15].
• Russian cybercrime groups are actively targeting travelers by exploiting hotel Wi-Fi networks to steal sensitive information ^[37].

Newly Discovered Vulnerabilities

Major Incidents or Breaches

• The Police National Legal Database (PNLD) in the UK suffered a cyberattack resulting in the exposure and dark web publication of contact information for over 100,000 police officers, government employees, and criminal justice professionals ^[10][16].
• A cyberattack targeted Liechtenstein’s Register of People Behind Companies and Foundations, impacting a registry used for anti-money laundering and counter-terrorism efforts ^[31].
• Brinks Home disclosed a data breach with hackers leaking files, though alarm monitoring and system functionality were reportedly unaffected ^[35].
• River Bank confirmed that data stolen in a June ransomware attack was subsequently deleted by the attackers, with investigations ongoing ^[32].
• Brazilian educational institutions have experienced multiple security incidents, as detailed in a new analysis of response cases ^[1].

Newly Discovered Vulnerabilities