21st April – Threat Intelligence Report

Weekly Threat Intelligence Bulletin: This report highlights a surge of active incidents and research findings — multiple high-impact data breaches (Ahold Delhaize, Hertz, Conduent, Western Sydney University, etc.), confirmed ransomware incidents affecting critical services (DaVita; claims by INC Ransom), active exploitation of vulnerabilities (CVE-2025-24054 NTLM hash disclosure campaign; Apple and Oracle critical patches), and threat actor activity including an APT29 phishing campaign delivering GRAPELOADER/WINELOADER and novel techniques like Waiting Thread Hijacking; researchers also note targeted ransomware groups (CrazyHunter) using advanced evasion methods.