12th May – Threat Intelligence Report

This weekly Threat Intelligence Bulletin catalogues multiple active incidents and advisories: several organization breaches and service disruptions (Legal Aid Agency, Pearson, Masimo, airlines, schools), multiple actively exploited or critical vulnerabilities (Android CVE-2025-27363, Kibana CVE-2025-25014, WordPress CVE-2025-27007, Samsung MagicINFO CVE-2024-7399), and threat actor activity including ransomware (DragonForce), widespread downloader/malware campaigns (FakeUpdates/SocGholish), and a cryptocurrency-stealing campaign (Inferno Drainer) that affected thousands of wallets; vendors and CISA provide mitigations and protections.