Ukraine Says Russian Intelligence Used Fake Support Texts to Steal Messaging Credentials

A large batch of security news highlights widespread active exploitation, nation-state targeting, new malware families, and multiple high-severity vulnerabilities. Ukrainian and US authorities attribute a long-running Russian intelligence campaign to phishing and fake support texts that harvest messaging credentials (including coercing Signal Backup Recovery Keys) to fully restore and take over accounts. Several new malware/backdoor families and campaigns were reported (SharkLoader/StrikeShark deploying Cobalt Strike, TinyRCT, STOCKSTAY, Mistic, Gaslight macOS prompt‑injection, Miasma supply‑s