Major Incidents or Breaches

  • BridgePay, a major U.S. payment gateway provider, confirmed a ransomware attack resulting in a widespread outage and disruption of multiple services. The incident began on Friday and impacted key systems.

  • Moltbook, a social network platform for AI agents, exposed personal data belonging to real human users due to a security lapse.

Newly Discovered Vulnerabilities

  • US authorities warned that discontinued edge devices lacking vendor support are being actively targeted in attacks by state-sponsored hackers.

Notable Threat Actor Activity

  • German federal agencies (BfV and BSI) issued a joint advisory regarding Signal phishing campaigns targeting politicians, military personnel, and journalists. The campaign aims to compromise sensitive communications.

  • A state-aligned cyberespionage group, tracked as TGR-STA-1030/UNC6619, conducted a global operation dubbed “Shadow Campaigns,” targeting government infrastructure across 155 countries.

Trends, Tools, or Tactics of Interest

  • Increased targeting of unsupported and discontinued edge devices by state-sponsored threat actors, highlighting ongoing exploitation of legacy hardware in critical environments.

  • Use of phishing campaigns leveraging secure messaging platforms (Signal) to target high-profile individuals, indicating an evolution in social engineering tactics.

Regulatory or Policy Developments Affecting the Security Industry

  • German authorities issued public guidance and warnings to political, military, and media sectors regarding ongoing phishing threats, reflecting heightened national security posture and inter-agency collaboration.