Hacktivist ICS attacks intensify globally. HazyBeacon backdoor abuses AWS Lambda for C2 in Southeast Asia. AsyncRAT forks fuel a sprawling RAT ecosystem. DeceptiveDevelopment (UNC5342, Void Dokkaebi) escalates npm supply chain attacks with XORIndex.