ThreatsDay Bulletin: Claude Chat Abuse, NastyC2 npm Packages, Device-Code Phishing + 25 More Stories

This weekly roundup catalogs numerous active cyber threats and trends: fileless macOS infostealers, credential-stealing campaigns leveraging AI/chat and browser extensions, supply-chain compromises via npm packages delivering a Rust C2 and a multi-ecosystem worm, zero-days and exploit chains (including SD‑WAN privilege escalation and the HTTP/2 Bomb), large-scale phishing and fraud operations, and disclosures of sophisticated loaders and malware-as-a-service; the recurring theme is attackers weaponizing trusted tools and services rather than breaking in through obvious channels.