Interlock ransomware gang exploited Cisco firewall zero-day weeks before disclosure: Amazon

Multiple high-impact incidents: the Interlock ransomware gang exploited a zero‑day in a popular Cisco firewall line weeks before public disclosure (Amazon report); Russian state‑linked actors (APT28) exploited a Zimbra webmail vulnerability to breach a Ukrainian maritime agency; and a Russia‑linked campaign using an advanced iPhone exploit called “DarkSword” can compromise iPhones with little or no user interaction, exfiltrate data rapidly, and remove traces (Lookout). Related reporting highlights US concerns about CISA staffing and broader election‑security assessments. No public CVE IDs were