1st December – Threat Intelligence Report

This weekly Threat Intelligence Bulletin summarizes multiple active, high-impact incidents: large data breaches and extortion (Cl0p, INC) exposing PII and corporate data; a massive npm supply‑chain compromise (Shai‑Hulud 2.0) affecting hundreds of packages and thousands of repositories; the ShadowV2 Mirai-based botnet exploiting IoT CVEs to enable DDoS; widespread credential exposure in public GitLab repos; and Android GhostAd adware exfiltrating files—accompanied by vulnerability disclosures, patches, and new TTPs like HashJack.