SmudgedSerpent targets U.S. Iran policy experts, tied to Charming Kitten and MuddyWater. Scattered Spider (UNC3944), LAPSUS$, and ShinyHunters (UNC6040) merge into a cybercrime alliance. NGate enables NFC-relay ATM theft. APT-C-60 refines VHDX phishing.