Today’s briefing focuses on exploitation of Zyxel switches and Veeam backup agents, while new government and research reporting expands the picture of recruitment-driven compromise and runtime software-supply-chain attacks.