20th July – Threat Intelligence Report

**Weekly Threat Intelligence Bulletin (week of 20 July):** This report summarizes multiple active security incidents — a third‑party data breach at Ernst & Young, an npm supply‑chain compromise distributing malicious Jscrambler releases, ransomware that disrupted Fairlife production, and a malware incident at Nihon Kotsu — alongside AI‑assisted attack campaigns, critical vulnerabilities with active exploitation (including Microsoft SharePoint/AD FS, WordPress wp2shell, and SonicWall SMA1000), and research on threat actors and ransomware families.