26th August – Threat Intelligence Report

This weekly Threat Intelligence Bulletin reports multiple active incidents and research: corporate cyberattacks impacting Halliburton and Microchip with operational disruption; large-scale payment data theft from the Oregon Zoo; a 6.5 TB ransomware leak by Rhysida; DDoS attacks against Monobank; phishing campaigns linked to APT42 delivering BlackSmith malware; identified high-severity vulnerabilities including CVE-2024-28000 (LiteSpeed Cache privilege escalation) and CVE-2024-38206 (Copilot Studio SSRF); and threat actor activity such as North Korea’s MoonPeak RAT, BlindEagle campaigns in Latin America, and Qilin ransomware deploying a Chrome credential stealer.