Bitrefill blames North Korean Lazarus group for cyberattack

Multiple high-impact incidents and active exploitations were reported: Bitrefill attributes an early-March compromise to North Korea’s Lazarus/Bluenoroff group; the FBI seized Handala data-leak sites after a destructive Stryker attack that wiped ~80,000 devices (abusing Microsoft Intune), prompting CISA guidance to harden Intune. Russian APT28 (GRU) actors are exploiting a Zimbra Collaboration Suite XSS in attacks on Ukrainian government targets (CISA ordered federal patching). A critical Microsoft SharePoint flaw is being actively exploited. Interlock ransomware has been leveraging a maximum‑