“Office”

FBI announces another arrest tied to ShinyHunters breach that exposed FBI personnel data and job applicants' information.

South Korea believes AI-assisted tools were used in breaches exposing data for at least seven banks and 68,000 people.

U.S. Treasury sanctioned Tren de Aragua members for ATM jackpotting thefts across the U.S., part of law enforcement crackdown.

Microsoft links NeedyMantis malware to long-term persistence in telcos, universities, medical nonprofits, and government contractor networks.

Kiteworks urged customers to shut down systems temporarily after receiving threat intelligence of possible imminent attacks.

TeamFiltration campaign (UNK_CondorFiltration) compromised Microsoft 365 accounts across 28 tenants, impacting Chilean retail and finance.

Spanish regulator AEPD reports first AI-agent-powered multi-stage data breach exfiltrating personal data via automated agent.

OPSWAT researchers found two zero-days in TP-Link cameras that enable remote eavesdropping and data exposure.

Japan's Digital Agency breached via a VPN flaw, exposing ~240,000 personnel records; review VPN appliances and incident response plans.

Report covers US actions against a $2.29B cybercrime marketplace tied to DPRK-linked hacking activities and illicit proceeds.

US Treasury sanctions Xinbi Guarantee for facilitating scams and money laundering, targeting its infrastructure and operators.

Microsoft released an unprecedented Patch Tuesday fixing 974 CVEs, including two actively exploited Windows zero-days; prioritize critical updates.

A Bavarian municipal utility's internal IT systems were encrypted, operations unaffected but recovery ongoing after cyberattack.

Microsoft released its largest Patch Tuesday, fixing roughly 973–974 vulnerabilities including two actively exploited zero-days; prioritize exposure-based patching.

Extortion group Nightmare Eclipse alleges CrowdStrike zero-day release and leaks Manchester Airports Group data.

Researcher released a FalconFlank PoC showing privilege escalation in CrowdStrike Falcon sensor, creating urgent patch/practice risk.

US Coast Guard creates centralized Office of Maritime Cybersecurity Policy to govern port, vessel, and maritime facility cybersecurity.

Massive DDoS disrupted Norway's government digital services, taking multiple public-facing systems offline.

US sanctions Iranian cyber actors while the UK discloses a cyber intrusion that disrupted a small power plant.