Dozens of Open VSX Extension Clones Linked to GlassWorm Malware

This SecurityWeek feed reports multiple active and emerging threats: researchers linked over 70 cloned Open VSX extensions to GlassWorm malware, indicating a supply-chain/backdoor risk from extension clones; a new unpatched PhantomRPC technique can let a fake RPC server impersonate services and escalate to SYSTEM on Windows; an incomplete Windows patch leaves systems open to zero‑click attacks (historically exploited by APT28); an OpenSSH 15‑year flaw could allow full root shell access via certificate principal parsing; vulnerabilities in Zero Motorcycles and Yadea electric two‑wheelers pose e