Activity Summary - Week Ending on 19 September 2025
- Red Sky identified 9,431 connections from ‘new’ and unique, compromised IP addresses
- Hydra Communications in the UK hit 140x
- CISA Alert - Schneider Electric Exploitation
- CVE-2025-5056
- ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection & Mitigation Strategies
- The Shai-Hulud Worm
- nx Compromise
- Raccoon0365
- NCC Group - Scattered Spider and ShinyHunters
- Targeteer – EggStremeAgent
Link to full report: IR-25-262-001_weekly262.pdf
