⚡ Weekly Recap: Critical CVEs, Linux DDoS Botnet, Device-Code Phishing, Android Spyware and More

This week's security digest leads with the FBI formally pinning North Korea's TraderTraitor group for stealing $6.43 billion in crypto from Binance across 11 blockchains, now the largest crypto heist on record, with $2.85 billion frozen by exchanges and issuers. Other major stories include Volt Typhoon's "Silent Train" relay infrastructure used for zero-day attacks, a third-party JavaScript supply-chain hack that drained $2.7 million from Polymarket wallets, a backdoored Claude Code extension distributed via Cursor Marketplace affecting up to 5,000 users, and the new Kairos Go-based Linux DDoS botnet spreading through default Telnet credentials. Also covered: the MadApe device-code phishing kit abusing Microsoft authentication, the uCreator Android spyware capable of cloning WeChat accounts, and a long list of trending CVEs across Wasmtime, Drupal, Chrome, Firefox, Juniper, Okta, Apache Kafka, Apache Camel, TeamViewer and more that administrators are urged to patch promptly.