Microsoft Flags Mass Phishing Campaign Using Fake Compliance Emails

A collection of Infosecurity Magazine reports highlighting a surge in high-impact cyber activity: Microsoft warns of a mass phishing campaign using fake compliance emails that targeted ~35,000 users across 13,000 organisations; North Korean APT actors trojanized a Yanbian gaming platform to deploy Windows and Android spyware; a Venomous#Helper campaign impersonated the US Social Security Administration to deliver signed RMM tooling for persistent access; Trellix disclosed unauthorized source-code access; a Python backdoor (Deep#Door) and npm supply‑chain malware (worm-like propagation and a AI