In terms of mega breaches, there was just one significant event in France, where France Travail, formerly known as Pôle Emploi, warned that threat actors stole (again) personal details of an estimated 43 million individuals.

In the fintech sector, decentralized finance platform WOOFi experienced an $8.75 million by a threat actor who used flash loans to manipulate the algorithm.

As always, as we are used in this complicated period, state-aligned threat actors from Russia, China and North Korea were quite active, especially APT28 and APT29 (the latter allegedly stole some portions of Microsoft source code), Kimsuky, and Evasive Panda.

But it’s the Cyberwar front, which probably offered the most interesting events: the Main Intelligence Directorate of Ukraine’s Ministry of Defense breached the Russian Ministry of Defense, Russian media outlets published an intercepted conversation via Webex, in which Bundeswehr officials were discussing the country’s support for Ukraine, a new wiper malware, WinDestroyer, was discovered, and an RAF plane carrying U.K. Defence Secretary Grant Shapps had its GPS signal jammed while flying close to Russian territory.

And finally there were some DDoS attacks, in particular the Pro-Russian Anonymous Sudan disrupted some Alabama State Government websites.

For the details, feel free to browse the timeline, and obviously share it to support my work in spreading the risk awareness across the community. And don’t forget to follow @paulsparrows on X (formerly Twitter,) or even connect on Linkedin, or Mastodon for the latest updates.