⚡ Weekly Recap: Chrome 0-Day, UniFi Exploits, macOS Stealers, VPN Flaw and More

**Executive summary:** This weekly cybersecurity recap highlights several high-risk, actively exploited vulnerabilities (including a Chrome 0-day and an Oracle PeopleSoft zero-day used in intrusions), large-scale supply-chain and package compromises (Arch AUR and malicious npm/PyPI packages), widespread phishing-as-a-service operations tied to massive card theft, and ongoing ransomware and espionage campaigns — emphasizing that attackers continue to leverage old code, abandoned packages, weak defaults, and AI-themed lures to gain access and scale attacks.