New Bluekit Phishing Kit Features AI Assistant

This SecurityWeek roundup highlights several active threats and defensive moves: a new Bluekit phishing kit in development adds an AI Assistant and automated domain registration to streamline phishing campaigns; Deep#Door, a stealthy Python-based backdoor, is being used for persistent Windows espionage implants; threat actors are abusing platforms like Hugging Face and ClawHub to distribute malware; and a mini Shai‑Hulud supply-chain poisoning impacted popular packages. Also covered: the arrest of a Scattered Spider actor, an NSA tool vulnerability, FBI alert on hacker‑enabled cargo theft, two