Weekly Cyber Security Roundup #2

Week 2 of The Weekly Cyber Roundup (TWCR)

10/13/20251 min read

🔒 Cybersecurity Vigilance is More Crucial Than Ever 🔒

This week, we witnessed significant developments in the cybersecurity landscape that underscore the need for heightened awareness and proactive measures across all sectors. Here are the top stories you should know:

1. Williams & Connolly Law Firm Targeted by Nation-State Zero-Day Attack

On October 13, 2025, prominent D.C. law firm Williams & Connolly confirmed a cyberattack attributed to a nation-state actor, leveraging a zero-day vulnerability to infiltrate attorney email accounts. This incident highlights an escalating espionage campaign aimed at the U.S. legal sector.

Key Lessons: Legal firms must enhance cybersecurity measures, focusing on regular vulnerability assessments and employee training.

2. Clop Ransomware Gang Exploits Oracle EBS Zero-Day in Data Theft Attacks

The Clop ransomware gang has been exploiting a critical zero-day vulnerability (CVE-2025-61882) in Oracle E-Business Suite, allowing unauthenticated attackers to execute remote code. Oracle responded with a patch over the weekend.

Key Lessons: Organizations should establish proactive vulnerability management practices to mitigate exploitations by threat actors.

3. Salesforce Refuses to Pay Ransom After Large-Scale Data Theft Attacks

Salesforce affirmed its decision not to engage in ransom negotiations following a significant data theft campaign targeting major clients. The Scattered Lapsus$ Hunters group claims possession of nearly 1 billion records.

Key Lessons: Organizations need clear policies regarding ransom payments and collaboration with law enforcement in cases of cyber extortion.

4. Third-Party Breaches: A Wake-Up Call for Modern Cybersecurity

The threat from third-party vendors continues to grow in our interconnected digital environment, necessitating a reassessment of cybersecurity strategies by businesses.

Key Lessons: Implementing proactive measures against third-party vendor risks is essential.

5. Lessons from the M&S, Co-op, and Harrods Security Breaches

Analyzing recent cyberattacks on these retailers reveals essential lessons for IT and cybersecurity leaders focused on resilience and response.

Key Lessons: Continuous training, third-party risk management, and transparent communication are critical.

The evolving threat landscape invites all organizations to reflect on their cybersecurity posture. Are your defenses robust enough to withstand these challenges? Let’s connect and discuss strategies for enhancing our cybersecurity frameworks.

#CyberSecurity #InfoSec #DataSecurity #TeamSC