APT37 hackers use new malware to breach air-gapped networks

A diverse set of cyber incidents and vulnerabilities was reported: North Korea-linked APT37 deployed new removable-drive malware to bridge internet-connected and air‑gapped systems; CISA detailed RESURGE, an implant tied to zero‑day exploitation of Ivanti Connect Secure (CVE-2025-0282) that can remain dormant; Trend Micro patched critical Apex One RCE flaws; Juniper PTX (Junos OS Evolved) has a critical unauthenticated remote root takeover vulnerability; and Google API keys embedded in client code can expose private Gemini AI data. Law‑enforcement and abuse updates include a Europol operation,