The Xcode Assassin Returns: A Deep Dive Into the Latest XCSSET Version

Unit 42 threat intelligence covering recent malware, espionage, ransomware, supply-chain, cloud, IoT, AI-assisted attack activity, and zero-day vulnerabilities. Key reports describe XCSSET v40 targeting macOS developers through Xcode, AI-assisted exploitation, credential theft from Zimbra webmail, chained Siemens ROX II OT switch zero-days enabling privilege escalation and persistent root access, npm and AI marketplace supply-chain threats, TuxBot IoT botnet activity, ransomware operations, Vidar Stealer evasion techniques, and cloud bucket hijacking risks.