FBI: Russian hackers now target Signal backup recovery keys

Multiple high-impact threats and active campaigns were reported: a Russian-linked phishing campaign evolved to steal Signal Backup Recovery Keys (enabling access to historical messages); CISA issued an urgent deadline to patch an actively exploited vulnerability in Cisco Unified Communications Manager Server; a supply-chain compromise injected malicious script into Polymarket’s frontend, costing customers ~$3M; and threat actors are creating fraudulent OpenAI organization invites to harvest sensitive data. Additional notable activity includes Bluekit phishing adopting browser-in-the-middle log