Policy drops and phishing pops.

CyberWire Daily roundup highlighting several active cybersecurity developments: the White House AI legislative framework, FBI warning of Iranian actors using Telegram for command-and-control, Russian operators phishing Signal users, law enforcement shutdown of a massive dark-web CSAM network, Tycoon 2FA recovery after disruption, the emergence of VoidStealer’s stealthy Chrome key-theft technique, QNAP patches for Pwn2Own-exploited flaws, and CISA ordering urgent fixes for a critical Cisco firewall vulnerability.