⚠️ Region Alert: UAE/Middle East
The past week saw significant cyber activity, ranging from massive data breaches at the LAPD involving 7.7 terabytes of data to disruptive ransomware attacks on Dutch healthcare provider ChipSoft and the German political party Die Linke. Financial sectors were also targeted, with Bitcoin Depot reporting a $3.6 million loss from digital asset accounts. Emerging threats in the AI space, such as the GrafanaGhost exfiltration technique and supply chain vulnerabilities in AI routers, highlight the expanding attack surface as organizations increasingly integrate autonomous agents into their workflows.
Critical vulnerabilities were addressed in widely used enterprise solutions including Ivanti Endpoint Manager, Adobe Reader, and Fortinet FortiClient EMS, many of which were being actively exploited in the wild for remote code execution. Threat intelligence reports from Check Point and other researchers indicate a rising trend in high-velocity operations, notably by the Storm-1175 group using Medusa ransomware. Additionally, a sophisticated hack-for-hire campaign linked to the BITTER APT has been identified targeting journalists and government officials across the Middle East through mobile spyware and phishing.
