New FBI Alert: Russian Intelligence Uses Signal Recovery Keys to Access Messages

Multiple high-impact security developments: the FBI/CISA warn Russian intelligence actors are stealing Signal backup recovery keys to access message history and perform long-term account takeover. Microsoft details a hospitality-focused phishing campaign delivering TonRAT with resilient persistence. JFrog published a working exploit for DirtyClone (Linux kernel privilege escalation, CVE-2026-43503, CVSS 8.8) — a memory-only root escalation — and Curl maintainers fixed 18 vulnerabilities in a large release. Palo Alto Unit 42 reports Chinese APT CL-STA-1062 expanding attacks on Southeast Asian政府