[December-2-2025] Daily Cybersecurity Threat Report

Posted on

This report details a series of recent cyber incidents, providing key information for each event, including published URLs and associated screenshots, strictly based on the provided data.

1. Alleged unauthorized access to target Microsoft IIS

2. Alleged data breach of unidentified organization (R E)**

3. Nomen falls victim to TridentLocker Ransomware

4. Alleged Data Breach of Ernst & Young Global Limited

5. LA Injury Attorneys falls victim to Qilin ransomware

6. Kurt J. Lesker Company falls victim to CHAOS Ransomware

7. Alleged Data Leak of AMEX and Discover CVV Data in USA

8. Alleged Sale of Compromised Credentials from 2022–2025 Logs

9. Alleged Access to EdTrust

10. Alleged leak of login credentials to BCIA Agency

Conclusion

The incidents detailed in this report highlight a diverse and active landscape of cyber threats. Ransomware and data breaches are prominent, affecting various sectors from Information Technology (IT) Services and Professional Services to Law Practices and Semiconductors, and impacting countries including Germany, France, the UK, the USA, and Tunisia. The compromised data ranges from internal infrastructure and organizational data to sensitive client files and card credentials.

Beyond data compromise, the report also reveals significant activity in initial access sales and infrastructure destruction, with threat actors targeting Microsoft IIS, educational institutions like EdTrust, and security agencies. The nature of these incidents emphasizes the critical importance of robust cybersecurity measures, including strong access controls, data protection strategies, continuous vulnerability management, and proactive threat intelligence to defend against a wide array of sophisticated and opportunistic attacks.

Related Posts