AnalysisPublished 15 Dec 2025

15th December · Threat Intelligence Report

Source Check Point Research

Mentions 2 CVEs

Mentioned vulnerabilities

Description

For the latest discoveries in cyber research for the week of 15th December, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES The Indian government confirmed cyber incidents involving GPS spoofing at seven major airports, including Delhi, Mumbai, Kolkata, and Bengaluru. The attack affected aircrafts using GPS-based landing procedures. Despite signal disruption to navigation […] The post 15th December – Threat Intelligence Report appeared first on Check Point Research .

Impact

For European organizations, the GPS spoofing incident underscores vulnerabilities in aviation and critical infrastructure systems that rely on GPS signals, which could be exploited to disrupt operations or cause safety hazards. Although the incident occurred in India, similar attacks could target European airports or transport systems, especially given Europe's dense air traffic and reliance on GPS-based navigation. The healthcare and financial sector breaches in the US highlight risks to sensitive personal data that European entities also manage, emphasizing the need for robust data protection. The ransomware attacks and government-targeted breaches illustrate the persistent threat to public sector and critical infrastructure entities in Europe, which are often targeted by sophisticated threat actors. The actively exploited zero-day vulnerabilities in widely used software platforms like Google Chrome and Apple WebKit pose direct risks to European users and enterprises, potentially enabling remote code execution and system compromise. SAP vulnerabilities are particularly relevant given SAP's extensive use in European enterprises for business-critical applications. The rise in phishing campaigns and advanced malware techniques further threaten European organizations by increasing the risk of credential theft, unauthorized access, and ransomware infections. Overall, these threats could lead to data breaches, operational disruptions, financial losses, and reputational damage across multiple sectors in Europe.

Defensive guidance

European organizations should prioritize immediate patching of critical vulnerabilities, especially those in widely used software such as Google Chrome, Apple WebKit, and SAP systems, to prevent exploitation. Aviation and transport authorities should implement multi-layered navigation security measures, including GPS signal authentication, alternative navigation systems, and anomaly detection to mitigate GPS spoofing risks. Healthcare and financial institutions must enhance monitoring of access to sensitive data portals, enforce strict access controls, and conduct regular audits to detect unauthorized access early. Public sector and critical infrastructure entities should strengthen ransomware defenses by implementing network segmentation, offline backups, and incident response plans tailored to ransomware scenarios. User education campaigns are essential to raise awareness of sophisticated phishing techniques like ConsentFix and impersonation of trusted services, emphasizing cautious handling of browser prompts and links. Organizations should deploy advanced threat detection solutions capable of identifying multi-stage infection chains and evasive malware behaviors. Additionally, supply chain security should be reinforced to prevent exposure through third-party contractors or leaked credentials. Collaboration with national cybersecurity agencies and sharing threat intelligence can improve preparedness and response capabilities across Europe.

References

research.checkpoint.com/2025/15th-december-threat-intelligence-report/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 5 Jan 2026, 16:18 UTC

References

Community reviews

Related threats