22nd April – Threat Intelligence Report

This bulletin reports multiple high-impact cyber incidents and intelligence: an APT (UNC5221) exploited zero-days in Ivanti VPN to compromise MITRE, numerous ransomware breaches (including UNDP, Cherry Health, and LockBit-related theft from a Tyler Technologies supply chain), active exploitation attempts against Palo Alto firewall CVE-2023-0017, disclosed critical vulnerabilities (Libarchive CVE-2024-20697, Forminator CVE-2023-5674, Ivanti CVEs), and ongoing phishing campaigns (Fin7) and disinformation operations—collectively indicating widespread active threats across public and private sectors.