Microsoft Patches Three Zero-Days, F5 Suffers Nation-State Breach, and Critical Adobe Flaw Actively Exploited

A BlackFog report for Q3 2025 reveals a 36% year-over-year increase in ransomware attacks, reaching record levels. Critically, data exfiltration is now a near-universal tactic, occurring in 96% of incidents, confirming the dominance of double-extortion. The Qilin group remains highly active. Healthcare was the most targeted public sector, while manufacturing was hardest hit in non-disclosed attacks. This update reinforces the escalating threat and the critical need for data exfiltration prevention, highlighting new mitigation strategies like DLP and network traffic analysis.

Swiss federal authorities (NCSC, fedpol) have issued a joint warning regarding a significant escalation in AKIRA ransomware attacks, impacting approximately 200 Swiss companies. Damages are in the millions of Swiss francs, with attacks intensifying to four to five per week. The primary initial access vectors are insecure remote access methods, specifically VPNs and RDP, lacking multi-factor authentication. This update highlights a broader targeting strategy beyond specific VPN vulnerabilities, emphasizing the critical need for MFA on all remote services to counter the group's intensified campaign.

New intelligence attributes the F5 breach to the Chinese espionage group UNC5221, known for using the BRICKSTORM backdoor to exfiltrate source code. This update also highlights the release of 44 new F5 vulnerability patches, including CVE-2025-53868, which customers must apply immediately. The Australian Cyber Security Centre (ACSC) has issued an urgent advisory, reinforcing the global impact and the need for heightened vigilance. While F5 found no evidence of supply chain compromise, the specific attribution and volume of patches underscore the increased and immediate threat to F5 users worldwide.