The Good, the Bad and the Ugly in Cybersecurity – Week 33

This report summarizes three incidents: (1) a UK court sentenced a member of the decentralized cybercrime collective “The Com” for global sextortion and blackmail of minors; (2) US/UK/South Korean agencies warned of Gunra ransomware — a double-extortion RaaS targeting critical infrastructure that exploits FortiOS/FortiProxy CVEs, uses cross-platform payloads, and shows links to North Korean state-backed actors; and (3) a researcher released ShieldBreak, a Microsoft Defender bypass zero-day that yields SYSTEM privileges on patched Windows 11/Server 2025 systems via cloud-hydration and DLL planting techniques.