ThreatsDay Bulletin: Worm Code Leaked, AI Agent Phished, Claude Code Patch + 28 New Stories

A comprehensive report on recent cyber threats reveals multiple critical security breaches and emerging attack techniques.

• •11.1 million devices infected with infostealers exposed 3.3 billion identity records to illicit markets
• •SilabRAT, a $5,000-monthly MaaS RAT, uses browser profile cloning and HVNC for credential theft and remote access
• •Famous Chollima, a North Korean actor, responsible for 47% of state-sponsored hands-on-keyboard attacks against tech sector
• •Miasma supply chain attack toolkit exposed on GitHub with capabilities targeting PyPI, npm, RubyGems, and GitHub Actions
• •Attackers use download pumping techniques to artificially inflate npm package download counts and appear legitimate to developers