Apple patches a zero-day exploited in sophisticated attacks. UNC5518 sells CAPTCHA-lure access to partners deploying CORNFLAKE.V3. Berserk Bear (Blue Kraken, Crouching Yeti, Dragonfly, Koala Team) exploits a 7-year-old Cisco flaw. ADFS phishing bypasses Microsoft 365 MFA.