1. Executive Summary Notepad++’s update mechanism (WinGUp) was abused in a targeted supply-chain compromise in 2025, where certain users’ update traffic was selectively redirected to attacker-controlled infrastructure and served trojanised…
1. Executive Summary The SolarWinds breach (often tracked as SUNBURST by Mandiant/FireEye and Solorigate by Microsoft) was a landmark software supply-chain compromise in which adversaries trojanised signed SolarWinds Orion software…
1. Executive Summary In late August 2025, Jaguar Land Rover (JLR) suffered a major cyber incident that triggered a precautionary shutdown of internal IT systems and a prolonged disruption to…
1. Executive Summary In late September 2025, Asahi Group Holdings disclosed a cyberattack that disrupted core business systems in Japan and later confirmed that personal information linked to nearly two…
CVE-2025-0283 was disclosed alongside CVE-2025-0282 and described by NVD as a stack-based buffer overflow leading to local privilege escalation. CISA added CVE-2025-0282 to its Known Exploited Vulnerabilities (KEV) catalogue on…
1. Executive Summary In mid-May 2025, Coinbase disclosed a data security incident in which cyber criminals bribed and recruited overseas customer-support personnel (contractors/employees) to improperly access and exfiltrate customer information…
1. Executive Summary In spring 2025, Co-op Group suffered a significant cyber incident that ultimately resulted in the copying (exfiltration) of Co-op member personal data. Co-op later confirmed that the…
1. Executive Summary France-based telecoms provider Free (and sister company Free Mobile, both under Groupe Iliad) confirmed a cyberattack that resulted in unauthorised access to customer personal data. According to…
1. Executive Summary On 21 February 2025, cryptocurrency exchange Bybit suffered a theft of approximately $1.5 billion in virtual assets—an incident the US Federal Bureau of Investigation (FBI) publicly attributed…
1. Executive Summary In February 2025, Lee Enterprises disclosed a material cybersecurity incident that disrupted distribution, billing, collections, and vendor payments across its newspaper portfolio. In a regulatory filing, the…