Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands

The feed highlights active and emerging cybersecurity threats, including nation-state social engineering, ransomware, supply-chain compromises, zero-day exploitation, credential theft, AI-agent abuse, industrial control system attacks, and vulnerabilities affecting widely deployed enterprise products. Several reports describe exploitation in the wild or high-impact outcomes such as unauthenticated administrative access, remote code execution, network intrusion, and disruption of critical infrastructure.