Thank You!

The Monthly Threat Report by Hornetsecurity brings you monthly insights into M365 security trends, email-based threats, and commentary on current events in the cybersecurity space. This edition of the Monthly Threat Report focuses on industry events from the month of July 2025.

Active exploitation of the Citrix Bleed 2 vulnerability has prompted emergency patch mandates, while Chinese state-backed attacks on Viasat and North American telecoms signal escalating geopolitical cyber threats. At the same time, breaches at Zoomcar and the lingering Snowflake-Ticketmaster incident expose millions to phishing risks, as concerns over shadow AI, weak governance, and emerging lightweight malware like Myth Stealer dominate the threat landscape.

Recent cyberattacks have disrupted major retailers like Marks & Spencer and Dior and led to emergency security patches from Microsoft and Google for actively exploited zero-day vulnerabilities. Meanwhile, a breach at the educational software provider PowerSchool has resulted in extortion threats against US school districts, highlighting the significant downstream risks of compromised SaaS platforms.