For hackers, sharing is caring.

CyberWire Daily roundup: CISA warns of active SharePoint attacks and hardening is urged; NSA publishes guidance on coordinated vulnerability disclosure; new macOS stealer (ClickLock) and a Rust-based RAT (LabubaRAT) are reported; Splunk and Zoom patched critical flaws; Spirals ransomware can encrypt networks in under 24 hours; new Windows evasion techniques are noted; 23andMe reached a major settlement over a 2023 breach; and a guest discusses agentic AI as an emerging insider threat.