Date of Incident: November 2025 Overview: The Korean Air data breach, reported in December 2025, compromised the personal information of approximately 30,000 employees, including names and bank account numbers. The breach exploited vulnerabilities in the company’s ERP system, utilizing tactics such as exploitation of remote services and account access removal. This incident affected the transportation… Read More »Korean Air Data Breach
The week of December 10-17, 2025 witnessed unprecedented velocity in critical vulnerability exploitation and nation-state targeting of global infrastructure. Five CVSS 10.0/9.8-rated vulnerabilities entered active exploitation phases within 72 hours of disclosure, impacting 644,000+ domains and requiring emergency government directives. Simultaneously, APT36 demonstrated Linux-specific espionage capabilities against Indian government infrastructure, ToddyCat expanded email harvesting operations,… Read More »Weekly Report: New Hacking Techniques and Critical CVEs 10 Dec – 17 Dec 2025
This week (December 10–17, 2025) has been defined by state-level vulnerability exploitation and critical infrastructure sieges. The most significant strategic development is the confirmation of a successful breach of the French Interior Ministry, driven not by a zero-day, but by fundamental hygiene failures—a stark reminder that nation-state targets are often compromised via the path of… Read More »Weekly Cybersecurity Intelligence Report Cyber Threats & Breaches 10 Dec – 17 Dec 2025
In a recent Fireside Chat, Bruce Schneier- renowned cryptographer, Harvard professor, and one of the most influential voices in cybersecurity- joined Bikash Barai, Founder & CEO of FireCompass, to discuss how AI is fundamentally reshaping pentesting, red teaming, and the future of cyber defense. Watch the Full Fireside Chat Recording Gain first-hand insights from Bruce… Read More »AI and the Future of Offensive Security: Insights from Bruce Schneier and Bikash Barai
Between 2-10 December 2025, three developments stand out for enterprise defenders: Shai-Hulud 2.0 npm worm: A rapidly evolving supply chain threat abusing npm and GitHub Actions to build a self-propagating CI/CD worm, with active reporting and defensive guidance released during this week. The underlying campaign began in September but continued and evolved into December, especially… Read More »Weekly Report: New Hacking Techniques and Critical CVEs 2 Dec – 10 Dec 2025