AnalysisPublished 29 Sep 2025

29th September · Threat Intelligence Report

Source Check Point Research

Mentions 5 CVEs

Mentioned vulnerabilities

Description

For the latest discoveries in cyber research for the week of 29th September, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Stellantis, Automotive maker giant which owns Citroën, FIAT, Jeep, Chrysler, and Peugeot, has suffered a data breach that resulted in exposure of North American customer contact information after attackers accessed a third-party […] The post 29th September – Threat Intelligence Report appeared first on Check Point Research .

Impact

European organizations face multifaceted risks from the threats detailed in the report. The compromise of third-party platforms integrated with critical business systems, as seen with Stellantis and Volvo Group North America, highlights the vulnerability of supply chains and service providers, which European companies similarly rely upon. The ransomware attacks targeting sensitive sectors such as childcare (Kido nursery chain) demonstrate the potential for severe reputational damage, regulatory scrutiny, and operational disruption within Europe. Nation-state campaigns by actors like Nimbus Manticore pose significant espionage and intellectual property theft risks to European defense and telecom sectors, potentially undermining national security and critical infrastructure. The exploitation of critical vulnerabilities in widely used enterprise software (SolarWinds, Cisco ASA/FTD) threatens the confidentiality, integrity, and availability of European IT environments, especially given active exploitation in the wild. The OnePlus OxygenOS vulnerability risks bypassing SMS-based MFA, a common security control in Europe, potentially facilitating unauthorized access to sensitive accounts. The proliferation of fraudulent domains related to the FIFA World Cup 2026 could lead to widespread phishing and financial fraud targeting European consumers and organizations involved in the event. LockBit ransomware’s cross-platform capabilities threaten European enterprises running physical and virtualized environments, increasing the risk of data loss and operational downtime. Collectively, these threats could result in data breaches, financial losses, regulatory penalties under GDPR, erosion of customer trust, and disruption of critical services across Europe.

Defensive guidance

European organizations should adopt a multi-layered, proactive defense strategy tailored to the specific threats identified. First, conduct thorough third-party risk assessments and enforce stringent security requirements for suppliers and service providers, especially those handling sensitive data or integrated with core systems like Salesforce or HR platforms. Implement continuous monitoring and anomaly detection on third-party access and data flows. Prioritize patch management by promptly applying security updates for critical vulnerabilities in enterprise software such as SolarWinds Web Help Desk and Cisco ASA/FTD, leveraging automated patch deployment tools and vulnerability scanning to identify unpatched systems. For mobile device management, especially for Android devices like OnePlus phones, enforce application whitelisting and restrict installation of untrusted apps to mitigate exploitation of permission bypass vulnerabilities. Enhance endpoint protection with advanced threat detection capabilities to identify and block sophisticated malware and DLL side-loading techniques used by nation-state actors. Strengthen email security and user awareness training to counter spear-phishing and social engineering campaigns, particularly in defense and telecom sectors. Deploy DNS filtering and domain reputation services to detect and block access to fraudulent FIFA World Cup 2026 domains and related scams. Implement robust ransomware defenses including regular offline backups, network segmentation, and incident response plans tailored to ransomware scenarios. Finally, ensure compliance with GDPR by promptly reporting breaches and maintaining transparent communication with affected individuals and regulators to mitigate legal and reputational impacts.

References

research.checkpoint.com/2025/29th-september-threat-intelligence-report/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 23 Oct 2025, 01:29 UTC

References

Community reviews

Related threats