CyberCX and WP Engine’s latest report reveals active cyber threats targeting cloud environments, ransomware operations, and software supply chains. Key findings include:•Exploited Cloud Vulnerabilities: Attackers abusing misconfigurations in AWS, Azure, and SaaS platforms for initial access.•Ransomware-as-a-Service (RaaS) Expansion: New affiliate tactics leading to faster encryption and double extortion.•Software Supply Chain Compromises: Malicious code injections in third-party vendor updates, enabling silent backdoors.