📡 Outsider Takedown Details, 🇪🇺 ShinyHunters Council of Europe, 🔓 Lapsus$ GitHub Claim, 🇰🇵 APT37 NarwhalRAT, 🦠 Ransomware Surge, 🏥 Novo Nordisk Breach

ShinyHunters' claim against the Council of Europe is the day's defining story. The group says it stole 297 GB including payroll records, personnel files, and CVs spanning 2011 to 2026, and threatens to publish unless demands are met by June 16. The claim is unconfirmed, but at the scale of a 46-member intergovernmental body, even unverified claims force governments to plan for exposure of citizen data. It extends a campaign that already hit American Tower, Madison Square Garden, and Oracle PeopleSoft customers. ShinyHunters' Council of Europe claim

Lapsus$ claimed to have breached GitHub's internal platform and threatens to leak source code if no buyer is found, saying it will leak for free otherwise. The Lapsus$ GitHub breach claim. If substantiated, this ranks among the most significant source-code exposures ever, arriving as platform-level flaws already enable the Shai-Hulud supply-chain worm. GitHub has confirmed nothing; treat the claim as unverified but prepare for the worst.

APT37 is pushing NarwhalRAT through Microsoft-themed spear-phishing, chaining LNK files into a Python-based stealer with a pCloud dead-drop C2 resolver. Ransomware activity stayed high, with DragonForce claiming three UAE hotel targets and Qilin posting four victims. Breach disclosures added Novo Nordisk, warning clinical trial patients, and BWH Hotels, with reservation data exposed over six months; Maine took its breach portal offline after fake VRChat and Discord filings.

Watchlist: treat each ShinyHunters deadline as a trigger for breach-response preparation, monitor GitHub source-code exposure chatter, and review EDR coverage for LNK-to-PowerShell-to-Python chains.