⚡ Weekly Recap: IoT Exploits, Wallet Breaches, Rogue Extensions, AI Abuse & More

The weekly recap highlights steady, rather than flashy, cyber risks, with IoT exploits and supply-chain fallout continuing to drive impact. A nine-month campaign named RondoDox has levered the React2Shell flaw (CVE-2025-55182) to recruit IoT devices into a botnet, with Shadowserver Foundation statistics showing about 84,916 susceptible instances as of January 2026, including 66,200 in the U.S.

The Top News section notes Trust Wallet’s Chrome extension compromise linked to the Shai-Hulud supply chain outbreak, which reportedly resulted in around $8.5 million in losses. The piece also covers broader campaign activity, including DarkSpectre-linked browser-extension attacks and other malware threats such as FireClient and Oyster, underscoring how trusted software and extensions remain a frequent attack surface.

OpenAI’s notice on prompt-injection resilience in ChatGPT Atlas is cited, together with Microsoft’s observation of AI being used across malicious activities, including phishing and automation. Overall, the recap argues that attackers reuse trusted tactics and that ongoing vigilance—updates, extensions, and secure identities—remains essential. According to Shadowserver Foundation, around 84,916 instances remain vulnerable to CVE-2025-55182 as of January 4, 2026.