23rd December – Threat Intelligence Report

This weekly Threat Intelligence Bulletin reports multiple major security incidents—large ransomware attacks and data breaches affecting government, healthcare, education, and telecom organizations (e.g., RIBridges, Ascension, Texas Tech, Phreesia, Telecom Namibia), critical vulnerabilities in widely used software (Chrome, Apache Struts2, FortiWLM), and active phishing/malware campaigns (Google Calendar abuse, malicious VSCode/NPM packages, HubSpot-based credential harvesting), plus nation-state activity attributed to Russian GRU and new tooling from Lazarus (CookiePlus).