ThreatsDay Bulletin: Claude Chat Abuse, NastyC2 npm Packages, Device-Code Phishing + 25 More Stories

This week's cybersecurity landscape demonstrates how attackers continue to exploit legitimate internet infrastructure for malicious purposes, presenting new challenges for defense teams worldwide. The ThreatsDay bulletin reveals concerning trends across multiple attack vectors, highlighting the evolving sophistication of threat actors targeting both individuals and organizations.

Among the most notable developments, researchers identified malicious actors abusing Claude chat services, transforming AI conversation interfaces into delivery mechanisms for malware. This emerging threat vector capitalizes on growing user trust in AI platforms. Simultaneously, the npm repository faced renewed pressure with NastyC2 packages discovered in the ecosystem, potentially compromising countless development environments when these malicious dependencies were incorporated into legitimate projects.

Device-code phishing attacks have also gained prominence, with attackers exploiting authentication workflows to bypass traditional security measures.