Social Engineering, Ransomware, and Data Breach Surge

AI-powered email threats achieve 54% click-through, $3B BEC losses. ClickFix attacks up 500%. Vishing technique weaponizes legitimate Zoom alerts. Recent breaches: Levi Strauss (phone-based social engineering, 200+ companies hit), Tata Electronics (630GB Apple data, cryptographic keys exposed), Framework (Metabase zero-day, customer PII). ShinyHunters hit three Salesforce deployments (21M, 25M, 1.1M records). Snowflake breach guilty plea (165 companies, $2.5M ransom). Shai-Hulud credential-stealing worm hit 400+ npm packages (2B installs). LexisNexis shut down services after suspicious activity, potential major data broker breach. Unit 42: 72-minute breach-to-exfiltration in 25% of cases, identity centrality in 89%.