Pakistani Police Systems Hit by Chinese and Indian Espionage

A wide-ranging spike in active exploitation, espionage and novel malware/attack techniques across cloud, AI and enterprise systems. Key items include active state-linked espionage in Pakistan, Russian actors mass-scanning vulnerable routers via weak SNMP credentials, active exploitation of a maximum-severity Adobe ColdFusion flaw, exposed AWS GovCloud credentials in a public GitHub repo, and a Progress ShareFile Storage Zone Controller security incident. New and evolving threats noted: OAuth Client ID spoofing in Microsoft Entra ID, agentic AI–driven attacks (including the first reported agent