"Apparently, opening the thing is now enough." — ThreatsDay
SideWinder’s ClickOnce phishing chain
A multi-stage phishing campaign attributed to the actor SideWinder now weaponizes ClickOnce application files delivered inside PDF lures to deploy Rust-based backdoors, the bulletin reports. The implants install persistence by modifying the Windows registry, gather host intelligence, and accept remote commands delivered through free serverless platforms such as Cloudflare Workers. The abuse of ClickOnce in a nested PDF-phishing flow illustrates a simple but effective escalation: a document that looks harmless starts an installer that never visibly prompts the user for the critical actions that follow.
Flooding Dropper: 846 malicious npm components
Sonatype disclosed a large-scale supply-chain operation called "Flooding Dropper" involving 846 npm components. The attacker appears to automate account/package creation and reuse naming and version patterns — for example, releases in the 35.x.y range — to create many superficially different packages that perform the same malicious behavior. Each package installs a first-stage JavaScript loader that identifies the host OS and retrieves a compatible payload from randomized hard-coded hosts. On Windows, the chain downloads a second loader that checks for sandboxes/virtual machines, patches Event Tracing for Windows (ETW) and Antimalware Scan Interface (AMSI) functions, creates persistence via a scheduled task, and decrypts and executes its final payload. Sonatype notes the slight syntactic variations across packages are intended to evade signature-based detection.
This site is the portfolio.
OSINTSights runs on Cloudflare Workers, D1, R2, and Vectorize, with an AI pipeline on Hetzner ARM. Nubivance designed, built, and operates it. We do the same for clients.
See what we buildOdysseus RCE: an AI workspace’s high-severity flaw
Manifold Security reported a critical vulnerability in Odysseus, a privacy-focused AI workspace, that carried a CVSS-calculated severity equivalent to 9.9. The flaw allowed an authenticated non-admin user to execute OS commands with the privileges of the Odysseus process by smuggling an admin-only shell action onto a scheduled task across two ordinary API requests. Odysseus stores sensitive items — including user password hashes, TOTP secrets, stored provider API keys, the database, and the SSH keys Odysseus uses to reach remote machines — meaning a single foothold could expose API keys to spend, a mailbox to send from, SSH keys, and a scheduler to persist in. The issue was fixed in Odysseus version 1.0.2, and Manifold Security reported no evidence the vulnerability was exploited before the fix.
Samsung Bixby one-click compromise (CVE-2025-21079, CVE-2025-58486)
Researchers Dimitrios Valsamaras and Ken Gannon demonstrated at Pwn2Own Ireland (October 2025) how design oversights in Samsung's Bixby virtual assistant could be chained into a remote, system-level compromise triggered by a single click. The problems (tracked as CVE-2025-21079 and CVE-2025-58486) relied on an auto-granted Android permission implicitly approved in many Samsung applications; that permission let attackers issue unauthorized commands to Bixby, which maintains interprocess communication with system components. Because Bixby can relay commands to privileged services, the researchers showed a bridge from unprivileged apps to system domains. Samsung patched the issues late last year. The pair earned $50,000 for their Pwn2Own submission.
What this means for technologists, enterprises, and end users
- Technologists and security teams: Treat agent trust, package installs, and document parsing as execution surfaces. Datadog warned that trusting a repository in coding agents can let repository-controlled code run before the first prompt, and Mitiga described "PromptLogger" instruction files that steal prompts and environment variables without endpoint malware. Those are not hypothetical — the Odysseus and ClickOnce cases show how nominally benign developer or user actions can yield full-process compromise.
- Enterprises and procurement leaders: Supply chains and defaults are recurring weak points. Sonatype's Flooding Dropper campaign and the Flooding Dropper use of synthetic variations to evade signatures demonstrate why organizations should prefer vetted package sources, shorten credential lifetimes (as Microsoft and NuGet-related moves suggest), and monitor for unusual scheduled tasks or patched instrumentation points like AMSI/ETW.
- End users: Simple interactions remain high-risk. SideWinder's PDF/ClickOnce lures, Samsung’s one-click attack chain, and multiple ScreenConnect-install phishing flows (impersonating banks or hardware vendors) underline that clicking a link, opening an attachment, or following chatbox directions can be the initial step to loss of control.
The ThreatsDay bulletin closes with a pointed observation that echoes across these incidents: "The useful lesson is not that attackers suddenly became brilliant. It is that trust keeps accumulating in quiet places: package managers, project files, assistants, provisioning tools, remote access software, and forgotten systems nobody planned to revisit." In this week's run of exploits — from npm modules and ClickOnce payloads to an AI-workspace RCE and a one-click phone compromise — the attack path is rarely exotic: it exploits small, unattended trusts where systems hand over authority too early or too freely.
