Proxy wars and open doors.

CyberWire Daily headlines report a range of active cyber incidents and intelligence: Google disrupted a large residential proxy network, the RAMP cybercrime forum was apparently seized, a long-running North Korea‑linked threat group has split into three specialized operations, U.S. military cyber actions targeted Russian troll networks, journalists were targeted with phishing via Signal, SolarWinds patched critical Web Help Desk vulnerabilities, Amazon discovered a high volume of CSAM in AI training data, initial-access actors are adopting the Tsundere Bot for ransomware campaigns, and China executed individuals tied to cyberscam centers; the episode also features an interview about risks from open-source code maintenance.