Prepared Brief: Nor’easter Floods & Power Outages, Harvard & SonicWall Breaches

October 14, 2025 | 0700 CDT

Analyst Insight

Today’s posture is strained. A powerful nor’easter that began over the weekend continues to batter the U.S. East Coast, producing flood‑stage tides, tens of thousands of power outages, and major flight cancellations and delays.

At the same time, critical infrastructure faces escalating cyber threats: Harvard University reported a data breach tied to an Oracle zero‑day exploit, and security researchers revealed a widespread campaign compromising over 100 SonicWall VPN accounts.

These concurrent weather- and cyber-driven disruptions strain response resources and highlight the need for multi-domain readiness.

This is the second significant East‑Coast weather event in two weeks and follows a string of high‑profile cyber intrusions in Texas and elsewhere, indicating a pattern of overlapping infrastructure stressors.

Maintaining situational awareness, reinforcing cyber hygiene, and preparing for potential outages remain paramount.

Domestic Security & Civil Unrest

• Torrance, CA – School stabbing and bomb threat: A former student attacked staff at the Switzer Learning Center on Monday morning, stabbing three employees and claiming to have left pipe bombs; the bomb squad detonated two devices safely, and the suspect was arrested.

  • Why it matters: highlights the risk of targeted school violence and the importance of rapid police response and lockdown/shelter‑in‑place procedures.

• Richland County, OH – Human‑trafficking sting: Pennsylvania doctor Robert Zewe Jr. was arrested after agreeing to pay undercover agents to have sex with what he thought was a minor; the sting involved multiple law enforcement agencies and Homeland Security Investigations.

  • Why it matters: shows law enforcement's focus on trafficking and the need for community awareness about online grooming and exploitation.

• St. Helena Island, SC – Bar mass shooting: Four people were killed and at least 20 injured at a high‑school reunion in Willie’s Bar and Grill; investigators are still searching for suspects.

  • Why it matters: highlights ongoing mass‑shooting risk and potential copycat attacks; public events may see heightened security checks.

• No major protests or unrest reported in U.S. cities in the last 12 hours…no immediate disruption expected for public events or travel.

Infrastructure & Grid Alerts

• Nor’easter – East Coast: Heavy rain and high winds continue to cause coastal flooding, downed trees, and travel delays. Boston’s Logan Airport reported 76 delays and 43 cancellations, while New York’s LaGuardia experienced 94 delays and 21 cancellations. Tens of thousands were without power Monday morning, with New Jersey reporting over 18,000 outages and Connecticut nearly 11,500. States of emergency were declared in New York City, Long Island, Westchester County, and New Jersey.

  • Why it matters: ongoing flooding and power loss may trigger additional sheltering, strain emergency crews, and disrupt supply deliveries.

• Massachusetts plane crash: During the storm, a small plane crashed onto Interstate 195 in Dartmouth, killing two occupants and injuring a person on the ground. The crash shut down both sides of the highway for hours.

  • Why it matters: illustrates how severe weather can lead to aviation accidents and road closures, complicating evacuation routes.

• Sugar Land, TX – City cyberattack: A cyberattack in a Houston suburb disrupted online services, including the 311 contact center, permitting and utility billing, though critical infrastructure remained unaffected; Texas has faced a series of recent municipal cyber intrusions.

  • Why it matters: repeated attacks indicate cybercriminals are targeting municipal systems; residents may experience service delays and should monitor accounts for irregularities.

• Harvard University data breach: The Clop ransomware group exploited a zero-day flaw in Oracle E-Business Suite (CVE-2025-61882) to access limited Harvard University administrative data. Harvard says the breach was contained to a small unit and that patches have since been applied.

  • Why it matters: highlights the vulnerability of academic and administrative networks; organizations using Oracle EBS should apply patches and monitor for compromise.

• SonicWall VPN credential compromise: Researchers revealed that attackers have used stolen, valid credentials to compromise over 100 SonicWall SSLVPN accounts across 16 networks; the campaign began around Oct 4 and involved rapid log‑ins, network scans, and attempts to access local Windows accounts. Recommended mitigations include rotating all passwords and secrets, restricting remote access, and enabling multi‑factor authentication.

  • Why it matters: highlights escalating threats to remote‑access systems and the potential for lateral movement into critical networks.

• Multi‑country botnet targeting RDP (previously reported): A botnet using over 100,000 IP addresses has been attacking RDP services, employing timing and login‑enumeration techniques; administrators are urged to block offending IPs, patch systems, and implement VPN/MFA.

  • Why it matters: demonstrates large‑scale probing of remote‑desktop services; organizations should avoid exposing RDP directly to the internet.

• No major water contamination events or boil‑water advisories were reported from approved sources in the past 12 hours.

Extreme Weather & Natural Hazards

• Nor’easter – Flooding & high winds: Coastal flooding continues along the Jersey Shore and mid‑Atlantic. Cape Cod recorded a 65 mph wind gust, and Barnegat Bay, NJ, may see a 5.5 ft surge, which could cause structural damage and isolate communities. River flood warnings may linger through Tuesday.

  • Why it matters: residents should avoid flooded roads, prepare for extended power outages, and secure property; emergency shelters remain open in Atlantic City.

• Rain totals: The storm has delivered more than 11 inches of rain in Georgetown, SC, over 7 inches in Whiteville, NC, and smaller totals up to 3.35 inches in Massachusetts.

  • Why it matters: saturated ground increases the risk of landslides and prolongs recovery; travelers should monitor road conditions.

• Wildfire risk remains low across most regions; no significant earthquakes, volcanic eruptions, or other natural hazards were reported.

Border & Immigration

• No significant cartel activity, human‑smuggling interdictions, or large border crossings were reported by approved sources during the reporting window. Border operations remain steady; no increased risk indicators reported.

Church, Mission & Civilian Safety

• No global incidents against churches, missionaries, or U.S. civilian volunteers were reported. Travel security risk in known mission zones is currently low, though teams in West Africa and the Middle East should monitor evolving political conditions.

International Flashpoints

• Ukraine – Kharkiv bombing: Russian forces used guided bombs on Monday to strike the Nemyshlianskyi, Slobidskyi, and Shevchenkivskyi districts of Kharkiv, knocking out power to about 30,000 customers; a hospital was damaged, four people were injured, and hundreds of windows were shattered. The attack is part of a broader campaign against Ukraine’s energy grid ahead of winter.

  • Why it matters: highlights the vulnerability of critical infrastructure in conflict zones; energy supply disruptions could affect global grain exports and fuel prices.

• Gaza – Hamas crackdown amid ceasefire: Following a U.S.‑brokered ceasefire and hostage‑prisoner exchange, Hamas has sought to reassert control by killing at least 33 members of rival gangs in Gaza City. U.S. President Donald Trump indicated Hamas may have a temporary role in policing Gaza.

  • Why it matters: internal violence could derail the ceasefire; any flare‑up may increase regional instability and energy‑price volatility.

• Madagascar – Gen Z protests topple president: Madagascar’s president Andry Rajoelina fled the country after Gen Z‑led protests over power and water shortages escalated; at least 22 people have been killed since demonstrations began, and army units have defected to protesters. The president reportedly left on a French military aircraft, and his whereabouts are unknown.

  • Why it matters: signals a pattern of youth‑led unrest that has toppled governments; U.S. missionaries or businesses in Madagascar should exercise caution and review evacuation plans.

• UK – MI5 warns of foreign spying: Britain’s MI5 publicly warned MPs that China, Russia, and Iran are targeting them through blackmail, phishing, and influence campaigns. The agency urged politicians to track unusual interactions and remain vigilant.

  • Why it matters: indicates heightened global espionage; similar tactics could target U.S. officials and corporations.

• Israel & Gaza – War officially ends: Under a U.S.‑mediated deal, Hamas released the last living Israeli hostages while Israel freed nearly 2,000 Palestinian detainees; U.S. President Trump declared the two‑year war “over”.

  • Why it matters: although hostilities have paused, the region remains fragile; disruptions in oil and shipping routes could resume if violence flares.

Supply Chain & Liberty Watch

• No significant supply‑chain disruptions (port closures, rail strikes, or fuel shortages) or new constitutional‑rights cases were reported in the last 12 hours. Normal operating conditions prevail, though financial markets remain volatile amid geopolitical news.

Signals to Monitor

• Persistent cyber threats: Watch for additional victims of the Oracle EBS zero‑day and the SonicWall VPN credential campaign; any expansion into utilities or healthcare would require immediate defensive action.

• Nor’easter aftermath: Monitor continuing flood‑stage tides through Tuesday, especially along the New Jersey coast and Cape Cod; watch for secondary hazards such as landslides and road washouts.

• Potential copycat violence: In the wake of the Torrance school stabbing and St. Helena shooting, look for social‑media chatter indicating threats against schools, bars, or community events.

• Global protest contagion: Youth‑driven protests in Madagascar mirror recent uprisings elsewhere; monitor for similar movements in other countries that could destabilize governments or strain humanitarian operations.

• Escalation in Gaza or Ukraine: Any breakdown of the ceasefire or further attacks on Ukraine’s energy infrastructure could trigger broader conflict or supply‑chain disruptions.

Red Flags

• If power outages persist >48 hours in the Northeast or Gulf Coast, anticipate fuel and grocery shortages; prepare to deploy generators and relief supplies.

• If SonicWall or Oracle customers report unauthorized access, immediately disconnect VPN services and rotate credentials; treat as a potential lateral‑movement intrusion.

• If protests intensify in U.S. cities (e.g., “No Kings” demonstrations), expect road closures and possible curfews; adjust travel and resupply routes accordingly.

• If Russian attacks expand to Ukraine’s gas infrastructure, prepare for spikes in global energy prices and potential sanctions impacting supply chains.

• If Hamas or rival factions reignite hostilities, monitor oil tankers and maritime traffic for disruptions that could delay critical goods.

Preparedness Action Items

• Storm readiness (Northeast): Secure outdoor equipment and vehicles today; move valuables above flood level; charge power banks and maintain a three‑day supply of food and water. Limit travel until flood warnings lift and avoid flooded roads.

• Cyber hygiene: For organizations using Oracle EBS or SonicWall products, apply emergency patches immediately, reset all credentials, disable unnecessary remote access, and implement multi‑factor authentication by the end of the day.

• Personal cybersecurity: Individuals should enable MFA on all accounts, update passwords this week, and be cautious of phishing attempts that may leverage current events.

• Community vigilance: Report suspicious behavior near schools, religious facilities, and public events; practice active shooter drills at places of work or worship.

• Travel planning: Mission teams headed to Madagascar or the Middle East should verify travel insurance, register with the State Department’s STEP program, and prepare alternate evacuation routes.

Preparedness Focus of the Day – Situational Awareness

In dynamic environments, whether navigating flooding streets or crowded public gatherings, maintaining situational awareness is critical. Practice the “OODA loop” (Observe, Orient, Decide, Act): continually scan your surroundings, identify potential threats (unattended packages, aggressive individuals or rising water), decide on your course of action and act quickly. Encourage family members to communicate observations and designate rally points during emergencies.