Google gamed into advertising a malicious version of Authenticator

This briefing highlights several concurrent threats: attackers used Google Ads to distribute a fake Google Authenticator app (malware), high-severity vulnerabilities in ServiceNow and Acronis remain priorities for patching, Cisco Talos attributes a long-running campaign by APT41 using ShadowPad and Cobalt Strike against a Taiwanese research institute (including exploitation of CVE-2018-0824), AI-generated content is increasingly used in BEC fraud, and law enforcement disrupted a SIM-swapping ring that stole over $1M.