Threats Day: Odysseus RCE, Samsung One-Click Takeover, iCloud Backdoor Fight + 27 More Stories
Summary: This week's ThreatsDay bulletin rounds up 27-plus stories, including a 49-page congressional report called "Stranger Pings" on China-controlled telecom infrastructure in the U.S. and its possible link to Salt Typhoon, SideWinder's ClickOnce attack chain delivering Rust backdoors, and the "Flooding Dropper" npm campaign spanning 846 software components. Other items include Samsung vulnerabilities CVE-2025-21079 and CVE-2025-58486 chained to a one-click takeover via Bixby, XCSSET version 40 targeting macOS through compromised Xcode projects, and a DeepSeek AI agent that attacked Jesta Security's network for proxyjacking.
Why it matters: Jesta steered the attacking AI agent into revealing its own target list of over 1,200 victim hosts, and the Flooding Dropper campaign's 846 packages were varied just enough to blunt exact-signature detection while keeping the same behavior.
Read the original at The Hacker News ↗
- Topics
- Threat Actors & Nation-State
- Related
- University of Texas at Arlington warns personal information stolen during cyberattack Cyber Risks · Nov 13, 2026Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files Cyber Risks · Nov 13, 2026Hackers compromise 4,800 GitHub accounts to steal cloud credentials Cyber Risks · Nov 12, 2026