ThreatsDay Bulletin: $290M DeFi Hack, macOS LotL Abuse, ProxySmart SIM Farms +25 New Stories

This week's ThreatsDay Bulletin covers multiple critical security incidents spanning DeFi hacks, supply chain compromises, and emerging threat vectors.

• •North Korean-linked attackers stole $290 million from KelpDAO by compromising LayerZero's RPC infrastructure nodes
• •MajorDoMo smart home platform faces active exploitation of command injection (CVE-2026-27175) and unauthenticated RCE (CVE-2026-27174) vulnerabilities
• •Over a dozen malicious npm packages discovered stealing data, installing SSH backdoors, spreading XWorm RAT, and self-propagating through package ecosystems
• •Attackers increasingly use indirect prompt injection to exploit AI agents, manipulating hidden payloads to trigger unauthorized actions and data exfiltration
• •