ThreatsDay Bulletin: Worm Code Leaked, AI Agent Phished, Claude Action Patch + 28 New Stories

This weekly cybersecurity roundup documents a broad set of active and emerging threats: massive credential theft (over 3.3 billion items from infostealers), a publicly exposed supply-chain attack toolkit (Miasma, evolving to Hades) impacting hundreds of components, multiple commodity and MaaS malware (RATs, stealers, loaders), targeted APT operations (e.g., Famous Chollima, Nimbus Manticore), high-impact vulnerabilities (Comodo CVE), and novel TTPs (EDRChoker, Ghost-Sender); the briefing emphasizes that attackers increasingly rely on stolen identities, trusted tooling, and configuration abuse rather than zero-days and recommends auditing agent access, credentials, and browser extensions.