US Cyber Command reportedly pauses cyberattacks on Russia

**Infosec In Brief:** A roundup covering a reported US Cyber Command pause on operations against Russia, multiple active cybersecurity incidents including Chinese-linked exfiltration of Belgian security emails via a compromised Barracuda gateway, Cellebrite's use of Android/Linux kernel zero-days to surveil activists, high-severity disclosed CVEs (Ping Identity, Citrix, Cisco, TawkTo), a Medusa ransom claim targeting the wrong city, a phishing sting in the Netherlands, and a technique to abuse Apple Find My for tracking non-Apple devices.