Compromised IIS servers used as malware delivery mechanism by Lazarus
Critical zero days in Atera platform could allow for privilege escalation.
Decoy Dog toolkit appears highly targeted and largely undetected.