31th August – Threat Intelligence Report

**Executive summary:** This bulletin details multiple high-impact incidents and intelligence findings from the week of 31 August, including large-scale data breaches (Manchester Airports Group ~8.7M customers, McKesson ~284M patient-related records), ransomware listings (Qilin), active exploitation and emergency patches for critical vulnerabilities (PaperCut, Ubiquiti, Next.js, ServiceNow), APT and nation-linked campaigns (Nimbus Manticore, China-linked actors, QTFY), widespread phishing and voice/SMS-based fraud services, and emerging AI-targeted techniques and tooling that facilitate data exfiltration and agent manipulation.