China-Linked TA4922 Expands Phishing Attacks to UK, Germany, Italy, and South Africa

A high-volume threat roundup: China-linked TA4922 has broadened phishing operations into Europe and South Africa, while multiple campaigns deliver RATs and stealers via malvertising, fake open‑source sites, and malspam (DesckVB, ValleyRAT/Atlas RAT, Remus Stealer, AnimateClipper, SessionGate). Researchers disclosed new and actively exploited vulnerabilities (including a critical Magento deserialization RCE added to CISA KEV), an AI-found Redis RCE (CVE-2026-23479), a large Android patch batch with one actively exploited Framework flaw, an HTTP/2 remote DoS chain affecting major servers, and a)