The nominee in limbo.

Daily CyberWire roundup highlights multiple active cyber incidents and industry items: Microsoft 365 phishing threats, a new Android banking trojan with device takeover capabilities, claims of widespread Fortinet firewall compromises, an emergency CISA order to patch a severe Joomla plugin flaw, public publication of Madison Square Garden data, and malware disguised as Steam wallpapers stealing accounts — accompanied by links to source reporting and an industry interview.