TRACE Cyber Intelligence Pulse - 21 November 2025
Cyber threats do not wait for you to catch up. Stay ahead with CyXcel’s weekly threat intelligence foresight, grounded in real-world incident response and powered by our fusion of legal, technical and strategic expertise.
Edited by: Samuel Kudláč, Senior Analyst, and Danny Howett, Technical Director – Digital Forensics and Incident Response.
In Focus
European Commission Proposes Deregulation of GDPR and AI Regulations
This week, the European Commission proposed a Digital Omnibus package introducing deregulatory changes to the European Union’s General Data Protection Regulation (GDPR) and Artificial Intelligence (AI) Act. The proposal would delay regulation of high-risk AI systems and would allow companies to use personal data, including information linked to religious or political beliefs, ethnicity and health for AI training, narrowing GDPR applicability to instances where specific individuals can be identified.
The package includes proposals for streamlined cybersecurity reporting, reduced AI documentation requirements for small companies, and consolidated AI oversight under a single authority.
The European Commission stated these changes are necessary to maintain competitive advantage, especially as AI development continues to be a key driver of economic growth. Officials claim the current regulatory regime constrains European startups and small businesses.
Progressive and centrist factions in the European Parliament have voiced opposition to Digital Omnibus, citing concerns the package favors large technology groups and US government interest over European businesses.
Key Takeaways
If adopted, the package would materially weaken the EU’s flagship privacy and data protection regimes and could reset global expectations for data governance, particularly for organizations that currently align their non-EU operations with GDPR standards.
These changes would likely ease compliance burdens for major technology and AI vendors while increasing legal ambiguity for smaller businesses operating in the bloc. It is possible that erosion of regulatory regimes in the EU will establish a deregulation precedent likely to affect the competitiveness of European businesses by disproportionately favoring large technology companies and increasing concentration risk across the continent.
Beyond the technology sector, the proposal may accelerate AI deployment in financial services, healthcare, professional services and government sectors. In national security applications, this may increase exposure to automated surveillance, profiling and decision-making systems, with implications for democratic accountability and trust in both digital systems and public institutions.
Around the Globe
EU: Eurofiber Breach Affects Customer Data
French telecommunications provider Eurofiber disclosed that cybercriminals exploited a vulnerability in its ticket management platform exfiltrating sensitive company and customer data, affecting the company’s regional operations and cloud division. The threat actors are threatening to leak the stolen data unless ransom demands are met.
UK: Chinese Intelligence Targets Members of Parliament in Social Media Campaign
United Kingdom’s Security Service (MI5) alerted members of the Houses of Parliament that Chinese intelligence operatives were using fake LinkedIn profiles to target policymakers in an information gathering and influence operation. Attributed to Chinese Ministry of State Security, the campaign aligns with the country’s long-term espionage objectives.
US: Logitech Breached in Cl0p’s Oracle E-Business Suite Campaign
Logitech disclosed a data breach involving 1.8 terabyte of sensitive company data. The breach has been attributed to ransomware group Cl0p’s exploitation of Oracle E-Business Suite vulnerability CVE-2025-61882. The affected data includes personally identifiable information (PII) including identity documents and sensitive financial information.
We Can Help
Expand your threat intelligence monitoring capabilities beyond the dark web with support from CyXcel’s TRACE team. Contact our experts today to find out more.
Photo by Andrei Castanha on Unsplash.