Major Incidents or Breaches

  • Covenant Health confirmed a data breach impacting nearly 478,000 individuals, with attribution to the Qilin ransomware group. Data was stolen from systems in May 2025.
  • Ongoing cryptocurrency thefts have been traced to the 2022 LastPass breach, with attackers draining wallets years after the theft of encrypted vaults.
  • Trust Wallet reported that approximately $8.5 million was stolen from over 2,500 crypto wallets, likely linked to the “Shai-Hulud” NPM supply chain attack in November, described as an industry-wide compromise.

Newly Discovered Vulnerabilities

  • Over 10,000 Fortinet firewalls remain exposed to a five-year-old two-factor authentication (2FA) bypass vulnerability that is actively being exploited.
  • The Kimwolf botnet is exploiting an undisclosed vulnerability that has been under attack for several months, with Internet-wide security advisories issued.
  • The RondoDox botnet is exploiting the React2Shell vulnerability to compromise vulnerable Next.js servers, with a campaign noted in December.
  • Thousands of requests have targeted a dozen vulnerabilities in Adobe ColdFusion servers in a coordinated campaign observed by GreyNoise during the Christmas 2025 holiday.

Notable Threat Actor Activity

  • Transparent Tribe has launched a new wave of remote access trojan (RAT) attacks targeting Indian government, academic, and strategic entities.
  • The Qilin ransomware group was responsible for the data theft from Covenant Health.
  • Two US cybersecurity professionals pleaded guilty to acting as affiliates of the BlackCat/Alphv ransomware group, participating in ransomware attacks.
  • Cybercriminals are abusing Google Cloud Application Integration to send multi-stage phishing emails that impersonate legitimate Google-generated messages.

Trends, Tools, or Tactics of Interest

  • AI-driven threats are predicted to rise, with a growing shift in the industry focus from prevention to resilience and an emphasis on advanced security measures.
  • Attack Surface Management (ASM) tools are generating large volumes of asset inventory data and alerts, raising concerns about actionable ROI.
  • AI technologies made scams more convincing throughout 2025, with rapid advancements leading to systems that can evade meaningful human oversight.
  • Protest surveillance tactics are shifting from cooperation to antagonism and political marketing, affecting privacy and civil liberties.

Regulatory or Policy Developments Affecting the Security Industry

  • CTOs and industry experts are prioritising the formal governance of AI and quantum technologies, as well as enhancements in supply chain and managed cloud provider (MCP) security, for 2026.