Activity Summary - Week Ending on 26 September 2025
- Red Sky identified 7,212 connections from ‘new’ and unique, compromised IP addresses
- Flokinet[.]is in Iceland hit 114x
- CISA Alert - Dover Fueling Solutions
- CVE-2025-55065
- CTAC – 90 Days Dark Web Ransomware Sites: Victim Names
- Fake PyPI Login Site
- security@pypi.org
- Owen Flowers and Thalha Jubair Busted - Scattered Spider
- Collins Aerospace Hit
- Targeteer – TA415 Hacking Group
Link to full report: IR-25-270-001_weekly270.pdf