At a Glance * Volt Typhoon (China APT) – Ongoing espionage targeting U.S. critical infrastructure via “living‑off‑the‑land” techniques, gathering pre-positioning access in telecom systems. * Lumma Infostealer (Russia-linked cybercriminal) – International takedown disrupted C2 infrastructure used in widespread phishing operations; roughly 394K Windows hosts infected between March–May. * Hybrid State-Criminal