⚡ Weekly Recap: Bootkit Malware, AI-Powered Attacks, Supply Chain Breaches, Zero-Days & More

The Hacker News’ weekly recap highlights a shift toward targeting the complex ties that bind organisations, with bootkits and AI-powered attacks taking centre stage alongside supply-chain breaches and zero-days. A key threat noted is a HybridPetya ransomware variant that bypasses UEFI secure boot, with ESET reporting its samples uploaded to Google’s VirusTotal platform in February 2025, illustrating why boot-level defence remains critical.

In Top News, Samsung patching a zero-day (CVE-2025-21043) exploited in Android attacks is singled out, underscoring that high-severity flaws continue to drive urgent fixes across vendors. The piece also covers an extensive npm supply-chain incident, where over 2 billion weekly downloads were affected and attackers relied on phishing to publish trojanised packages, according to Arkham.

Also featured are other developments such as a range of new malware campaigns, phishing kits, and toolchains, emphasising that threat actors are increasingly blending traditional and AI-enabled techniques to harvest credentials and steal funds.