Signals, scams, and a Salesforce snatch.

CyberWire Daily briefs on multiple active cyber incidents and intelligence: reports of Russian actors targeting Signal and WhatsApp, FBI warnings about phishing impersonating US city/county officials, AWS console credential phishing campaigns, ShinyHunters and other actors allegedly targeting Salesforce data and an Ericsson service-provider breach, a macOS SHub stealer distributed via a fake CleanMyMac ClickFix trick, and CISA advisories about active exploitation of a recently patched Ivanti EPM flaw — plus related policy and AI-fake-news research items.