Commercial cloud infrastructure is now a wartime target.

## Executive summary This briefing compiles multiple active and high-impact threats: nation-state-linked actors targeting cloud infrastructure and enterprises (IRGC/Handala and North Korean UNC1069), a short-lived but widespread supply-chain compromise of the axios npm package that dropped a cross-platform backdoor (WAVESHAPER.V2), a spyware campaign delivered via an unofficial WhatsApp iOS client affecting Italian users, and active exploitation of critical vulnerabilities in F5 BIG‑IP (reclassified RCE, CVE-2025-53521) and Citrix NetScaler (CVE-2026-3055); vendors and national cybersecurity agencies urge immediate investigation and patching.