EU court adviser says banks must immediately refund phishing victims

This collection of security reports highlights multiple high-risk active campaigns and large breaches. Attackers are abusing .arpa reverse DNS and IPv6 for phishing-evasion, and using novel social-engineering techniques (ClickFix/InstallFix) to push infostealers, DonutLoader, and the CastleRAT backdoor—linked to Termite/Velvet Tempest ransomware activity. Major incidents include a Cognizant TriZetto breach exposing ~3.4M patient records, an FBI investigation into a breach of surveillance/wiretap systems, and widespread exploitation of a critical WordPress membership plugin to create admin back