Threat picture

Northbridge Building Society

Finance · UK · monitoring northbridge.example, northbridge-bs.example · Printable briefing · My work

Sample data: these figures are not live

Severe threat level. Severe: 2 exploited vulnerabilities in your technology, 1 with public exploit code; 1 high-severity leak finding (stolen credentials or leaks tied to your domains); 3 lookalike domains to review, 1 registered in the last 60 days, 1 able to send mail.

Worse than a week ago

Risk over the last 30 days

Score 0 to 100 from the reasons behind the level. Latest: 63.5, Severe.

Show the numbers

Day	Level	Score
8 Oct	Severe	63.5
7 Oct	Severe	62
6 Oct	Severe	60.5
5 Oct	Severe	59
4 Oct	Severe	57.5
3 Oct	Severe	56
2 Oct	Severe	54.5
1 Oct	Severe	53
30 Sept	Severe	51.5
29 Sept	Elevated	50
28 Sept	Elevated	48.5
27 Sept	Elevated	47
26 Sept	Elevated	45.5
25 Sept	Elevated	44
24 Sept	Elevated	42.5
23 Sept	Elevated	41
22 Sept	Elevated	39.5
21 Sept	Elevated	38
20 Sept	Elevated	36.5
19 Sept	Elevated	35
18 Sept	Elevated	33.5
17 Sept	Elevated	32
16 Sept	Elevated	30.5
15 Sept	Elevated	29
14 Sept	Elevated	27.5
13 Sept	Elevated	26
12 Sept	Elevated	24.5
11 Sept	Elevated	23
10 Sept	Elevated	21.5
9 Sept	Elevated	20

Why this level (6 reasons)

Do this first

3 of these 6 need action now (marked Now); the rest can wait for your next review.

Now Patch 2 exploited vulnerabilitiesCVE-2025-24472, CVE-2025-29824, CVE-2026-10426. 3 hosts confirmed exposed.
Snooze
Why For or until
Now Act on 1 high-severity leak findingReset affected passwords and sessions, then mark each reviewed.
Snooze
Why For or until
Now Review 3 lookalike domains1 newly registered: the usual phishing pattern.
Snooze
Why For or until
Review 4 critical threats
Snooze
Why For or until
Follow up 1 poorly rated supplierReview its findings and decide what to do.
Snooze
Why For or until
4 peers breached by ransomwareCheck you are not exposed to the same route in.
Snooze
Why For or until

Needs a follow-up

Taken over a week ago with no note since.

Acme Plumbing Ltd sam@northbridge.example · 9 days

1 snoozed · one ends soon

1 supplier review due until 10 Oct (ends in 2 days): Reviews booked for Friday (sam@northbridge.example)
Change date
Until

Across every source

The picture in numbers

Click any bar to see just those threats; every chart on this page redraws for your selection.

Threats by priority · 30 in total

CVEs by how directly they touch you · 6 in total

Vendor in your stack 6

Actors behind these threats

Scattered Spider22

Threats per week

3 weeks ago 0
2 weeks ago 0
Last week 6
This week 24 (4 critical)

What is waiting on you

More charts: sources, kinds, techniques, countries, sectors, CVEs, 14-day trend

Where they come from

What kind of threats

Sectors targeted

Finance4
Legal1

CVEs most mentioned, and where you stand

CVE-2025-29824 Confirmed on your devices30

New threats ranked for you, last 14 days · 30 threats

Since you last lookedyesterday6 new items (2 critical)1 newly exploited2 moved up, 1 into critical1 moved down2 new actors

See what changed

Moved up

Critical Fortinet FortiOS SSL-VPN pre-authentication heap-based buffer overflow (CVE-2025-24472) exploited in the wild against UK financial services28 → 50 · High → Critical
LockBit affiliate claims breach of regional UK building society31 → 41

Moved down

CVE-2025-31324 SAP NetWeaver Visual Composer unauthenticated file upload45 → 22 · Critical → Lower

New actors

Moves are measured against your organisation's own critical and high cut-offs.

Top threats to Northbridge Building Society

Critical Fortinet FortiOS SSL-VPN pre-authentication heap-based buffer overflow (CVE-2025-24472) exploited in the wild against UK financial servicesRelevant to your sector and country · 1 h ago50
Scattered Spider social-engineers help desks at financial services firmsExploited in the wild · matches your VPN vendor · UK targeted · 8 h ago48
Scattered Spider targets help desks at UK building societies with convincing phone-based password resetsRelevant to your sector and country · 15 h ago46
LockBit affiliate claims breach of regional UK building societyExploited in the wild · matches your VPN vendor · UK targeted · 22 h ago44
CVE-2025-31324 SAP NetWeaver Visual Composer unauthenticated file uploadRelevant to your sector and country · yesterday42
Ransomware group names a UK mortgage broker on its leak siteExploited in the wild · matches your VPN vendor · UK targeted · 2 days ago40

See the full threat feed (143) · Analysis

Peers breached

4 finance organisations and 1 in sectors you supply claimed by ransomware groups in the last 30 days, 2 in UK.

Harbourside MutualClaimed by lockbit · UK · 2 days agoYour country
Harbour Credit UnionClaimed by Scattered Spider · UK · 4 days agoYour country
Scattered Spider targets help desks at UK building societies with convincing phone-based password resetsClaimed by Scattered Spider · Country unknown · 15 h ago
Atlas LendingClaimed by qilin · United States · 6 days ago
Whitmore & Associates LawClaimed by Scattered Spider · Germany · 8 days agoYou supply: Legal

Show every ransomware victim in the list →

Who is targeting you

Scattered Spider

Items: 1
Last seen: 5 h ago
Targets: UK
Techniques: 14

LockBit

Items: 2
Last seen: 14 h ago
Targets: UK, United States
Sectors: Finance
Techniques: 13

Akira

Items: 3
Last seen: 23 h ago
Targets: UK, United States, Germany
Sectors: Finance, Legal
Techniques: 12

Black Basta

Items: 4
Last seen: yesterday
Targets: UK
Techniques: 11

All 9 actors

How to read this page

The banner is our overall read of the threat to your company, from every source we watch: the threat feed, vulnerabilities in your technology, leak findings, lookalike domains, your suppliers and attacks on your peers.
"Do this first" ranks the actions across all of those, most urgent first. Each one opens the right page.
The cards underneath show each area at a glance. Click any card for the detail.

Read the full guide for this page

Loading…