Weekly Recap: Outlook Add-Ins Hijack, 0-Day Patches, Wormable Botnet & AI Malware

This weekly recap highlights multiple high-risk incidents: actively exploited zero-days in Chrome and Apple products, a critical BeyondTrust pre-auth RCE being exploited in the wild, a supply-chain hijack of an Outlook add-in used as a phishing kit that exfiltrated thousands of Microsoft credentials, large-scale malware and infostealer campaigns leveraging trusted Google services, and widespread cloud-abuse and botnet operations (TeamPCP, SSHStalker) that convert misconfigured infrastructure into persistent malicious platforms.