3rd March – Threat Intelligence Report

This bulletin details multiple high-impact ransomware incidents and data breaches (including Medusa's claimed 50TB exfiltration from HCRG, Qilin's 350GB breach at Lee Enterprises, and HellCat activity against Orange Romania), several large data exposures (1.6M records at DM Clinical Research), critical vulnerabilities with available patches (CVE-2025-27364 in MITRE Caldera and CVE-2025-26794 in Exim), and Check Point research on a campaign abusing a legacy Truesight.sys driver to bypass protections—highlighting active exploitation, significant data loss, and evolving adversary TTPs.