Threat actors have shifted behaviors, refined their tooling and adapted tactics; here's what you need to know.