Cyberattacks are becoming more daring and multifaceted, targeting everything from global institutions to individual wallets. Russia-aligned TAG-110 is waging a cyber-espionage campaign against Central Asia, East Asia, and Europe, using HATVIBE and CHERRYSPY malware to infiltrate governments, NGOs, and educational organizations. A fake NFT game app managed to bypass Microsoft Defender and Google’s 2FA, stealing over $24,000 in cryptocurrency. SafetyDetectives linked this malicious campaign to vulnerabilities in common authentication systems. Meanwhile, a VulnCheck report exposed 15 of the most exploited vulnerabilities in products like Apache and Cisco, with 400,000 systems at risk due to publicly available proof-of-concept exploits. Read on for more.