The Cyber Express Weekly Roundup: Cybersecurity Weekly Round on Emerging Threats, Data Breaches, and Global Policy Shifts

This weekly roundup covers several notable cybersecurity events: a limited clinical-trial and HCP data exposure at Novo Nordisk; a multi-year UNC6508 espionage campaign targeting North American medical and defense-related research; a critical Microsoft 365 Copilot vulnerability (CVE-2026-42824) enabling data exfiltration via a chain of prompt-injection/HTML/SSRF issues; the international takedown of SocGholish infrastructure under Operation Endgame; and a TinyPulse incident exposing limited Nintendo employee survey data, illustrating threats across APT operations, high-impact vulnerabilities, and criminal infrastructure.