ThreatsDay: AI Compute Hijacking, Apple Email Flaw, BlueHammer Ransomware + 14 Stories

This weekly security roundup highlights a series of active threats and weaknesses: phishing campaigns delivering custom ransomware and credential-harvesting pages; high-impact malware families and RATs (Millenium RAT, BeepRAT) with large infection counts and extensive capabilities; disclosed vulnerabilities and exploits including a Microsoft Defender zero-day used in ransomware and a sandbox root escape affecting Claude Cowork; privacy flaws (Apple Hide My Email); platform-aware phishing and malicious browser extensions; misuse of stolen AI compute and prompt-injection risks; and state-linked activity prompting U.S. reward offerings — collectively illustrating attackers exploiting small gaps and weak checks across systems.