FBI warns UNC6040 and UNC6395 are breaching Salesforce, with ties to ShinyHunters, Scattered Spider, and Lapsus$. VoidProxy phishing targets Microsoft 365, Google, and Okta. BlackNevas and Yurei ransomware expand with double-extortion tactics.