Microsoft warns of ClickFix campaign exploiting Windows Terminal to deliver Lumma Stealer

Collection of recent cyber threats and vulnerability developments: Microsoft warns of a ClickFix social‑engineering campaign that abuses Windows Terminal to execute commands and drop Lumma Stealer; Iran‑linked APT Dust Specter is targeting Iraqi officials with phishing delivering new malware families (SPLITDROP, TWINTASK, TWINTALK); Google GTIG reports 90 zero‑days exploited in 2025 and uncovers the Coruna iOS exploit kit (targets iOS 13–17.2.1); CISA added multiple exploited flaws to its KEV catalog including CVE‑2023‑43000 (Apple WebKit); Cisco patched maximum‑severity Secure FMC flaws that可