Russian hackers deploy new malware in phishing campaign targeting Ukraine

Multiple security and privacy developments: researchers uncovered a suspected Russian espionage phishing campaign targeting Ukraine that deploys two previously undocumented malware strains; LexisNexis reported a contained breach with a threat actor claiming ~2 GB of legacy data; California’s CPPA fined PlayOn Sports $1.1M for unlawfully collecting student data and serving targeted ads; Google urged the U.S. Supreme Court to strike down geofence warrants; and Western allies launched a 6G security coalition to set voluntary resilience principles.