DPRK Uses Microsoft Zero-Day in No-Click Toast Attacks

The “Code-on-Toast” supply chain cyberattacks by APT37 delivered data-stealing malware to users in South Korea who had enabled Toast pop-up ads.