GCVE-110-CERTFI-2025-0045

This week, we report on the widespread impact of M365 account breaches observed in September and share guidance on how to protect against them. We also cover a large-scale data breach that occurred in Sweden and examine recent supply chain attacks. In addition, we provide information on the upcoming reporting obligation for vulnerabilities under the Cyber Resilience Act, which enters into force on 11 September 2026. We explain what organisations need to do to comply. In this week’s malware update, we take a closer look at the Tinba banking trojan.