Algerian national accused of running cybercrime marketplaces extradited to US

Multiple security news items: an Algerian national was extradited to the U.S. for operating cybercrime marketplaces selling phishing kits and fraud tools; healthcare vendor Xsolis suffered a targeted phishing attack that exposed data for ~1.4 million people; LastPass customer data was accessed via compromised OAuth tokens from a Klue supply‑chain breach affecting its Salesforce integration; and Cisco Unified Communications Manager (Unified CM) is being actively exploited via an SSRF (CVE-2026-20230) to drop webshells and achieve remote code execution. Other notable items include Anthropic’s ‘C