EU court adviser says banks must immediately refund phishing victims

Multiple active threats and large breaches reported: attackers are abusing DNS (.arpa) and IPv6 reverse lookups to evade phishing defenses, while social-engineering methods (ClickFix/InstallFix) and fake ‘Claude’/GitHub installers are being used to deliver info-stealers, DonutLoader and CastleRAT — techniques tied to groups like Velvet Tempest/Termite. Major data incidents include a TriZetto breach exposing ~3.4M patient records and an FBI investigation into breached surveillance/wiretap systems. CISA warned of three iOS flaws exploited by the Coruna exploit kit; a critical vulnerability in a