EU court adviser says banks must immediately refund phishing victims

A collection of security reports covering active phishing and social-engineering campaigns, multiple malware and ransomware operations, large-scale data breaches, and exploitation of software and platform weaknesses. Notable items include abuse of .arpa/IPv6 reverse DNS to evade email defenses, Termite ransomware activity linked to Velvet Tempest using DonutLoader and CastleRAT, a 3.4M-patient data exposure at Cognizant TriZetto, CISA guidance to patch iOS flaws exploited by the Coruna exploit kit, active exploitation of a critical WordPress membership-plugin vulnerability to create admin back