One in Eight Workers Has Sold Their Corporate Logins

A broad set of cybersecurity stories: widespread credential theft and resale, large-scale phishing campaigns (including fake compliance and SSA impersonations) that use signed tooling and sophisticated lures to steal credentials and maintain persistent access, and targeted APT supply‑chain operations (North Korean actors trojanizing gaming software). Multiple vendor and enterprise incidents were reported (Trellix source‑code access, Medtronic data breach), researchers uncovered a nine‑year Linux kernel flaw and other high‑impact vulnerabilities (including a Vect ransomware flaw that turns it w