Russian intel evolves Signal phishing; Cisco actively exploited; KDDI breach hits 14.2M

This briefing reports multiple high-priority threats: a Russian intelligence phishing campaign escalated to stealing Signal backup recovery keys enabling account takeover; an actively exploited Cisco Unified Communications Manager vulnerability subject to an urgent CISA remediation deadline; a KDDI-linked breach exposing up to 14.2 million email credentials across six ISPs; AI supply-chain abuse where benign GitHub repos can trick coding agents into running invisible malware; and a SharkLoader loader delivering Cobalt Strike. The report assigns a HIGH threat level and recommends immediate patching, user alerts and credential rotation, sandboxing AI agents, hunting for IOCs, and strengthening email security and MFA.