LexisNexis Breached by 'FulcrumSec,' Global Coalition Dismantles Tycoon 2FA Phishing Empire, and Critical Cisco RCE Patched

The UK's National Cyber Security Centre (NCSC) has issued an advisory to British organizations, including Critical National Infrastructure (CNI) and those with Middle East operations or supply chains. The warning highlights a heightened risk of indirect cyber threats and collateral damage from Iranian state-sponsored actors and affiliated hacktivist groups, stemming from the ongoing Middle East cyber conflict. While direct threats to the UK remain unchanged, organizations are urged to review their security posture, enhance monitoring, and update incident response plans to mitigate risks like phishing and DDoS attacks.

Palo Alto Networks' Unit 42 2026 Incident Response Report reinforces the shift to identity-based attacks and the role of AI. It found attackers can exfiltrate data in as little as 72 minutes from initial compromise, a significant reduction in response time. The report highlights that 89% of all incidents involved compromised identity systems and 65% of initial access attempts leveraged identity-based techniques, underscoring the critical need for robust identity security and automated detection.