Termite ransomware breaches linked to ClickFix CastleRAT attacks

A batch of high-impact security stories: ransomware group Velvet Tempest is using ClickFix social-engineering and legitimate Windows tools to deploy DonutLoader and CastleRAT; threat actors are increasingly abusing AI (and AI-enabled search) to scale attacks, including fake GitHub repos promoted by Bing that pushed info-stealers; a major Cognizant TriZetto breach exposed sensitive records of ~3.4M patients; CISA ordered federal patching for three iOS flaws exploited via the Coruna exploit kit in espionage and crypto‑theft campaigns. Other notable incidents include a new InstallFix variation of