29th June – Threat Intelligence Report

Weekly Threat Intelligence Bulletin summarizing several high-impact incidents and research: a supply-chain JavaScript injection at Polymarket leading to ~$3M theft, large credential breaches (KDDI: ~14.22M emails/passwords; FortiBleed: ~110M credentials siphoned), claimed data exfiltration from Tata Electronics and NAIC via an Oracle PeopleSoft zero-day, spoofed emergency alerts in Brazil, active exploitation of multiple CVEs (Cisco Catalyst SD‑WAN, Ubiquiti UniFi OS, Langflow), and emergent AI-enabled threats (EvilTokens device-code phishing, agent hijacking, BioShocking AI). The bulletin highlights ongoing exploitation, large-scale impact, and varied attacker techniques across supply-chain, cloud, and IoT/network infrastructure.