Is interim the new permanent?

**Executive summary:** This CyberWire Daily roundup compiles multiple cybersecurity news items: leadership and policy updates (NSA, CISA), a critical RCE in Trend Micro Apex Central, an NFC-capable Android malware (Ghost Tap) intercepting payment card data, an ESXi hypervisor exploit observed and researched in the wild, and coordinated law-enforcement actions including arrests of Black Axe affiliates and an extradition—indicating a mix of active technical threats, criminal operations, and defensive/mitigation activities across the ecosystem.