Activity Summary - Week Ending on 21 November 2025
- Red Sky identified 6,881 connections from ‘new’ and unique, compromised IP addresses
- HostGlobalPlus in the UK hit 801x
- CISA – Akira Ransomware Up-Date
- Citrix zero-days
- CVE-2025-5777
- Cisco Identity Services Engine
- Triofox Vulnerability for Remote Code Execution
- Operation Endgame
- China & Anthropic
- Targeteer – UNC6485 Threat Group
Link to full report: IR-25-325-001_weekly325.pdf
