What happened. July 2025 saw renewed Houthi attacks on commercial shipping, including claims of a vessel sinking and follow-on responses such as Greek salvage deployments—evidence that the threat corridor remains live despite earlier multinational actions. Why it...
Security
The “ToolShell” Summer: SharePoint zero-days, real-world fallout, and Microsoft’s new rules
What happened. In mid-July 2025, attackers chained two SharePoint zero-days (CVE-2025-53770/53771), rapidly compromising hundreds of orgs across government, healthcare, and finance. CISA added them to KEV and issued analysis, and Microsoft confirmed active...
Baltic & Eastern Europe GNSS Jamming/Spoofing: Aviation & Maritime Impacts
What happened. Summer 2025 reports show sustained GNSS interference across the Baltic region—researchers identify ship-borne or Kaliningrad-linked jammers; GPS World and Defense News detail the operational impact. EASA/IATA announced a joint plan to mitigate GNSS...
Snowflake fallout: why SaaS data platforms are your biggest crown jewels
What happened. In 2025, stolen data linked to the 2024 Snowflake compromises resurfaced in leak-site posts (e.g., Ticketmaster, Santander). Analyses point to weak or missing MFA and stolen credentials rather than a Snowflake platform exploit—reminding teams that...
Drones Are Now a Domestic Security Variable: Airports, Stadiums, and the BVLOS Shift
What happened. Drone incursions near U.S. airports and stadiums climbed again this summer, prompting federal alarm and new testing of detection tech; FAA says it still fields 100+ airport-near reports monthly and ran new detection trials, while Reuters reported rising...
Change Healthcare: the breach that keeps rippling through U.S. healthcare
What’s new. After the 2024 ALPHV/BlackCat attack, 2025 notices show continued remediation and consumer support windows (including deadlines for credit monitoring enrollment). HHS’s FAQ and Change Healthcare’s updates outline impacts and assistance programs as the...






