Fake Voicemail SVG Attachments Fuel Large-Scale Phishing Campaign

A security-news digest covering active phishing and malware campaigns, ransomware, exploited vulnerabilities, cyberattacks against critical infrastructure and enterprises, threat-actor activity, exposed credentials, supply-chain compromises, and emerging risks from AI-enabled attacks and autonomous agents. Multiple reports describe active exploitation and significant operational or data-impact potential, including attacks against critical infrastructure, banking users, public services, and more than 500 organizations targeted by Medusa ransomware.