Hackers hiding in plain sight.

**Executive summary:** This CyberWire Daily roundup highlights multiple active and serious cyber incidents: Medusa ransomware reportedly hit over 500 critical infrastructure organizations; Cl0p named dozens of victims in a PTC Windchill campaign; CISA urged immediate patching of exploited Microsoft/VMware/Apple vulnerabilities; researchers disclosed TWINLOOT credential‑stealing malware; the DOJ charged alleged Iranian hackers; and several other cybercrime and supply‑chain incidents were noted.