Weekly Cyber Intel Brief | 2025-11-28

Weekly Cyber Intel Brief: Week Ending 2025-11-28

PressContact Blog · 1 minute read

This edition tracks the week’s highest-impact cybersecurity and AI-security developments, selected for relevance to security, technology, and communications leaders.

This issue highlights a significant surge in supply chain and integration-based attacks, including the massive Sha1-Hulud 2.0 campaign affecting 25,000 GitHub repositories and a major Salesforce data breach involving Gainsight OAuth tokens. Additionally, a third-party vendor compromise at Iberia Airlines exposed millions of customer records, underscores the ongoing risks of interconnected enterprise ecosystems.

Editorial note: None. All stories were verified through multiple reputable technology and cybersecurity news outlets within the requested research window.

Sources - [Salesforce Discloses Unauthorized Data Access via Compromised Gainsight OAuth Tokens](https://www.cybersecuritydive.com/news/salesforce-investigating-customer-connected-Gainsight/806093) - [Iberia Airlines Confirms Customer Data Leak Following Third-Party Supplier Breach](https://www.bleepingcomputer.com/news/security/iberia-discloses-customer-data-leak-after-vendor-security-breach) - [Massive Sha1-Hulud 2.0 Attack Hijacks Over 25,000 GitHub Repositories via npm](https://thehackernews.com/2025/11/second-sha1-hulud-wave-affects-25000.html)