As the week comes to a close, here are today’s most important cybersecurity updates..

• China-linked fake recruitment sites targeted former U.S. federal employees and policy experts with high-pay lures.

• New malware families: CHILLYHELL (macOS backdoor) and ZynorRAT (Windows/Linux RAT) with advanced persistence and C2.

• Apple issued spyware threat notifications; CERT-FR confirmed risks to high-risk iCloud users.

• Hello Gym leak exposed 1.6M+ member audio recordings and PII, raising deepfake and phishing risks.

• LNER disclosed a breach exposing some customer contact details and past travel data.

• Panama’s Economy Ministry reported an attack claimed by INC Ransom, with 1.5 TB allegedly stolen.

• U.S. DOJ seeks to seize $5M in Bitcoin tied to SIM-swapping thefts laundered through wallets and an online casino.

• SwissBorg will repay affected users after partner Kiln’s compromise siphoned ~$41M in SOL; core platform unaffected.

• Geordie launched with $6.5M to help enterprises monitor agentic AI activity and manage AI security risk.

Have a safe weekend ahead!