Threat Intelligence Executive Report – Volume 2025, Number 5
This issue of the Counter Threat Unit’s high-level bimonthly report discusses noteworthy updates in the threat landscape during July and August
Similar Posts
Symbol Will Indicate When Connected Devices Are Cyber Secure
Bys sAndrew Martin reports: Consumers may soon be able to buy electronic products with a label indicating they are “cyber secure,” according to US officials. The White House on Tuesday announced the launch of a new US Cyber Trust Mark, indicating designated items follow best practices to avoid possible hacks. Products with the cyber mark are…
CrazyHunter ransomware escalates with advanced intrusion tactics, six Taiwan healthcare victims confirmed
Bys sIndustrial Cyber reports: New research from Trellix detailed that CrazyHunter ransomware has emerged as a serious and escalating threat, underscoring the growing sophistication of modern cybercriminal operations. Trellix has tracked the malware since its first appearance, observing rapid technical evolution and increasing activity. To date, the primary targets have been healthcare organizations in Taiwan, with……
WatchGuard Warns of Active Exploitation of Critical Fireware OS VPN Vulnerability
Bys sWatchGuard has released fixes to address a critical security flaw in Fireware OS that it said has been exploited in real-world attacks. Tracked as CVE-2025-14733 (CVSS score: 9.3), the vulnerability has been described as a case of out-of-bounds write affecting the iked process that could allow a remote unauthenticated attacker to execute arbitrary code. “This…
NICKEL TAPESTRY expands fraudulent worker operations
Bys sThe North Korean IT worker scheme grows to include organizations in Europe and Asia and industries beyond the technology sector
Instructure Reaches Ransom Agreement with ShinyHunters to Stop 3.65TB Canvas Leak
Bys sAmerican educational technology company Instructure, the parent company of Canvas, said it reached an “agreement” with a decentralized cybercrime extortion group after it breached its network and threatened to leak stolen information from thousands of schools and universities. In an update shared on Monday, the Utah-based firm said it “reached an agreement with the unauthorized…
Linux Kernel Dirty Frag LPE Exploit Enables Root Access Across Major Distributions
Bys sDetails have emerged about a new, unpatched local privilege escalation (LPE) vulnerability impacting the Linux kernel. Dubbed Dirty Frag, it has been described as a successor to Copy Fail (CVE-2026-31431, CVSS score: 7.8), a recently disclosed LPE flaw impacting the Linux kernel that has since come under active exploitation in the wild. The vulnerability was…