Russian state-sponsored actors have launched targeted attacks on users of secure messaging apps Signal and WhatsApp, leveraging phishing tactics to compromise accounts. This development comes as part of a broader campaign of cyber aggression, which also includes the exploitation of vulnerabilities in WordPress sites using ClickFix, a malicious tool. Meanwhile, Microsoft has issued patches for 80 identified bugs, and a botnet comprising 14,000 routers has been discovered. The targeting of secure communication platforms like Signal and WhatsApp underscores the evolving nature of cyber threats, with nation-state actors continually adapting their methods to bypass security controls. The implications of these breaches extend beyond the immediate victims, as they may have downstream effects on regulatory frameworks and supply-chain security1. So what matters to practitioners is that these attacks demonstrate the need for heightened vigilance and proactive measures to counter emerging threats.