State-sponsored hacking groups and commercial spyware vendors are reportedly sharing exploits, according to researchers with Google's security team. An Iranian state-sponsored hacking group has been collaborating with ransomware gangs to breach and extort U.S.-based organizations, including schools, healthcare facilities, and financial companies, since 2017. The collaboration was highlighted in a CISA advisory and confirmed by the FBI. Additionally, an Iranian entity recently paid over $3 million in ransom to prevent hackers from releasing data from more than 20 hacked banks, marking one of the worst cyberattacks on Iran's banking system, as reported by Politico in August.