Ransomware in the rearview.

A CyberWire Daily roundup reports multiple, concurrent cyber incidents: Jaguar Land Rover operations disrupted by a major cyberattack; ICE gaining access to Israeli-made phone spyware; APT28 expanding its arsenal with a new Outlook backdoor; Salesloft/Drift breach exposing Salesforce data of Cloudflare and Palo Alto Networks; a 378GB Navy Federal Credit Union data leak from a misconfigured server; a ClickFix scam distributing MetaStealer; and hacks affecting nearly 900,000 patients at specialty healthcare providers — highlighting widespread data theft, targeted APT activity, and active malware campaigns.