The latest Security Affairs newsletter highlights a surge in global cyberattacks, including critical infrastructure breaches, ransomware campaigns, and significant legal settlements involving major technology companies like Meta.

Key Points

• The UK’s Manchester Airports Group (MAG) suffered a breach exposing the personal data of 8.7 million customers.
• U.S. authorities seized China-linked hacking platforms QScan and QTRouter used to target domestic critical infrastructure.
• Meta agreed to pay up to $18 billion to settle lawsuits regarding the impact of social media on children.
• A critical zero-day vulnerability in PaperCut software is under active exploitation, prompting an emergency patch release.
• Researchers discovered a remote code execution flaw in Unitree G1 humanoid robots that allows unauthorized root access via Bluetooth.
• Operation Jackal resulted in 58 arrests globally to dismantle organized crime groups involved in money laundering and scams.

Why it Matters

These incidents demonstrate the escalating threat landscape facing both private corporations and national critical infrastructure providers. As state-sponsored actors and cybercriminals refine their tactics, organizations must prioritize vulnerability management and robust security protocols to protect sensitive user data and operational integrity.