Security Alliance handled 45 incidents between August 25 and 31, including a DPRK intrusion associated with $1.5 million in reported losses. The organization identified six domains observed that week as confirmed DPRK/UNC1069 infrastructure, several of which imitate Microsoft Teams or live-meeting services. The weekly collection also included thousands of phishing domains and additional fake meeting, video-conferencing, podcast, and recording lures.