The cybersecurity world is splitting into two parallel races — ransomware groups and state-sponsored hackers are moving aggressively into physical infrastructure that keeps economies running, while the tech industry's first-ever collective vulnerability-fighting coalition just launched to fight back before exploits even go public.

Evidence For

• North Korea's ScarCruft (APT37) has been caught deploying a new Python-based malware called NarwhalRAT through spear-phishing...