Russians are posing as Signal support to launch phishing attacks

**Infosec In Brief:** A news roundup reports multiple active threats including Russian intelligence-affiliated phishing used to takeover Signal accounts, Iran-linked domains used for psyops and doxxing (and an Intune-based attack on Stryker), a ransomware-related data theft affecting ~670,000 people, LeakNet’s ClickFix social-engineering delivering an in-memory loader, an AWS Bedrock sandbox DNS leakage issue, and an operational-security Strava location leak.