Major Incidents or Breaches

  • The database of the BreachForums hacking forum was leaked online, exposing information on approximately 324,000 user accounts. The leak includes user names, email addresses, hashed passwords, and other user data.

Notable Threat Actor Activity

  • The Iranian state-linked group MuddyWater has been attributed to a spear-phishing campaign targeting diplomatic, maritime, financial, and telecommunications entities in the Middle East. The campaign delivers a new Rust-based remote access trojan (RAT) dubbed “RustyWater.”
  • Spanish authorities, supported by Europol, arrested 34 individuals alleged to be members of the Black Axe cybercrime syndicate. The group is accused of conducting cyber fraud and organized crime activities resulting in €5.9 million in illicit gains.

Regulatory or Policy Developments Affecting the Security Industry

  • Ireland’s Department of Foreign Affairs recalled nearly 13,000 passports due to a software-related printing defect that omitted the “IRL” country code, rendering the documents non-compliant with international travel standards.
  • Reports indicate that US Immigration and Customs Enforcement (ICE) has acquired technology enabling the agency to surveil all mobile phones within a given geographic area, raising potential privacy and surveillance concerns.