A supply chain attack targeted security professionals, stealing 390K credentials.Phishing attack abuses Google Calendar to bypass spam filters.'Fix It' social-engineering scheme impersonates several brands.Android malware found on Amazon Appstore disguised as health app.