ThreatsDay: Odysseus RCE, Samsung One-Click Takeover, iCloud Backdoor Fight + 27 More Stories

Weekly ThreatsDay Bulletin: a curated summary of active and emerging cyber threats including large-scale npm supply-chain malware, ClickOnce and PDF phishing chains delivering Rust backdoors and ScreenConnect, macOS XCSSET v40 with fileless persistence and worming capabilities, EtherRAT using Ethereum smart-contract C2, Interlock ransomware activity, multiple high-severity vulnerabilities (including an Odysseus RCE with CVSS 9.9 and AD privilege-escalation flaws), AI-driven attacks (agent-managed intrusions, memory/prompt poisoning, and AI-assisted scam farms), router and provisioning flaws in TP-Link Omada, and an exposed initial-access broker—emphasizing that trust and defaults across package managers, coding agents, and provisioning systems are recurring exploitation vectors.