⚡ Weekly Recap: Instagram Account Hacks, Android Zero-Day, GitHub Worm and More

Weekly threat roundup: a Miasma worm supply-chain campaign hit 73 Microsoft GitHub repositories; Google patched an actively exploited Android Framework privilege-escalation (CVE-2025-48595); unknown actors maintained prolonged access to a stock exchange executive's Outlook mailbox and exfiltrated data; multiple supply-chain and package attacks on npm/PyPI and Hola Browser delivered miners, infostealers, and backdoors; additional active malware campaigns, ransomware analysis, and a broad set of tracked CVEs and threat actors (TA4922, OP-512, Pink) are highlighted — recommended actions include patching critical CVEs, auditing package sources, and investigating potential mailbox and repository compromise.