Cryptominer Abuses Linux PAM to Hide From SOC Analysts

A cybersecurity news digest covering phishing and adversary-in-the-middle campaigns, ransomware and data breaches, malware and evasion techniques, Linux and software vulnerabilities, AI-enabled threats, and attacks against enterprise and industrial systems. Notable items include Linux PAM abuse for cryptominer stealth, legitimate Microsoft authentication abuse, malicious Hugging Face models enabling code execution, a Linux kernel zero-day, DNS-tunneled TrickBot command and control, ransomware EDR-kill techniques, and Iranian targeting of Siemens and Schneider industrial equipment.