One email could be all it takes.

CyberWire Daily summarizes a range of active cybersecurity issues including a critical zero-day in on-prem Microsoft Exchange, a TanStack supply-chain compromise affecting OpenAI, a Mustang Panda-linked modular backdoor, a large-scale macOS infostealer, a 123,000-person data breach, and an underground market for unlocking stolen iPhones, plus coverage of exploit successes at Pwn2Own Berlin and evolving HIPAA security rules.