Researchers outline a years-long Russian campaign targeting the energy sector.

Amazon Threat Intelligence details a years‑long GRU-linked campaign targeting Western energy-sector critical infrastructure that shifted to exploiting misconfigured customer network edge devices for initial access; iVerify warns of a new Android RAT-as-a-service called "Cellik" that can automatically wrap malicious payloads into Play Store apps; and Texas has sued major TV manufacturers over alleged unlawful data collection via Automated Content Recognition.