BRB, pausing for a "Sanctuary Moon" marathon

Cisco Talos’ weekly Threat Source highlights the identification of a new ransomware-as-a-service group named Chaos (likely formed by former BlackSuit operators) using phishing, remote management tool abuse, double extortion and anti-analysis techniques; reports active exploitation of a SharePoint zero-day (CVE-2025-53770) being used in widespread attacks, a $44M theft from crypto exchange CoinDCX, and provides a list of prevalent malware SHA256 hashes/IOCs and mitigation recommendations such as MFA, patching and secure backups.