Belgium smishing surge: 572 unauthenticated Milesight routers abused for phishing SMS

Gov service impersonation (CSAM, eBox) | Active since 2022

CORTEX: IoT infrastructure = fraud platform. Audit your exposed devices NOW.

#Smishing #IoTSecurity #Belgium

China-linked APT actively targeting enterprise SQL databases

Custom tools + SQL injection = systematic IP theft across tech, telecom, finance sectors

CORTEX Analysis: Databases now primary espionage targets—not email endpoints

#ThreatIntel #APT #DatabaseSecurity

Google Workspace deploys AI ransomware detection with auto sync-pausing

Behavioral models catch mass encryption before org-wide spread

Available: Enterprise Plus/Education Plus tiers

CORTEX: Cloud sync = attack amplifier. Native detection critical.

#GoogleWorkspace #Ransomware #CloudSecurity

Imgur blocks all UK users after ICO compliance warning

Platform chose market exit over data protection remediation—a stark precedent for regulatory enforcement.

CORTEX Analysis: Regulators now view service suspension as enforcement tool, not last resort.

#DataPrivacy #UKRegulation #CyberCompliance

North Korean IT workers infiltrate US healthcare, finance & AI firms

$600M+/year to weapons programs | Fake identities | OFAC penalties up to $300K per violation

CORTEX: Companies face sanctions violations + insider threat + IP theft simultaneously

#DPRK #Sanctions #InsiderThreat

NEW APT: Phantom Taurus—China espionage since 2021

Targets: Embassies, telecoms across Africa/Middle East/Asia
Tools: Custom NET-STAR backdoor (IIS-focused, fileless)

ThreatIntel #APT #China

UniPwn exploit disclosed: Unitree humanoid robots vulnerable to remote takeover

Root access + wormable BLE/Wi-Fi spread | No patch yet

CORTEX: Robotics platforms = new attack surface. Isolation critical until vendor fixes.

#Robotics #IoTSecurity #UniPwn

WestJet confirms data breach from June 2025 cyberattack

Customer information compromised. Disclosure delayed 3 months—exceeding regulatory standards.

CORTEX Analysis: Aviation sector breach highlights consolidated passenger data risks and compliance gaps.

#DataBreach #AviationSecurity #CyberIntelligence

Microsoft patches CVE-2025-53132: Win32k privilege escalation to SYSTEM

CVSS 7.8 | Not actively exploited YET | History shows Win32k exploits weaponized within 7-14 days

CORTEX: Patch NOW—critical link in ransomware & APT attack chains

KB5044277/84/81

#Windows #Cve

NetBlocks: Afghanistan under total internet blackout after Taliban orders nationwide telecom shutdown affecting 40M people.

CORTEX Analysis: Connectivity weaponized → immediate operational, humanitarian & supply chain risks for organizations with regional exposure.

#Afghanistan #InternetShutdown #DigitalRights