No click, all tricks.

This CyberWire Daily episode collates recent cybersecurity headlines and advisories: a new Windows zero-day that can enable NTLM credential theft, a covert Chinese-linked network attempting to recruit laid-off U.S. government workers, malicious npm packages injecting persistent reverse shell backdoors, evolving macOS ReaderUpdate malware, DrayTek router disruptions tied to exploited vulnerabilities, CISA advisories on ICS vulnerabilities, ENISA reporting on space sector risks, and the arrest of a suspect in a $243M cryptocurrency heist; the episode includes links to source stories and a guest interview.