Cyber Threat Report: W/C May 25, 2026

Critical SQL Injection Vulnerability in Drupal Core Actively Exploited

Critical CVE-2025-34291 in Langflow AI Agent Under Active Exploitation

Critical Samba Vulnerability Allows Remote Code Execution

Critical Memory Overread Vulnerability in Citrix NetScaler Exploited

GCHQ Warns of Escalating Russian Cyber Threats to UK Infrastructure

Ghost CMS SQL Injection Exploits 700+ Sites in Ongoing ClickFix Campaign

Iranian Hackers Target US Aviation with New Malware and SEO Poisoning

Lazarus Group Escalates Attacks with Fileless RemotePE Trojan Targeting Crypto and Banks

Iranian Hackers Breach Los Angeles Transit System, Steal 700GB of Data

THORChain Hit by $10.7 Million Theft Due to Unapplied Patch

Federal MP's WhatsApp Accounts Hacked in Suspected Russian Phishing Attack

UK Enhances Protections for Subsea Cables Amid Rising Russian Threats