New Chaos Variant Targets Misconfigured Cloud Deployments, Adds SOCKS Proxy

A broad set of active threats and high-severity vulnerabilities were reported: a new Chaos malware variant now targets misconfigured cloud deployments and adds a SOCKS proxy; Masjesu botnet is offered as DDoS‑for‑hire targeting diverse IoT architectures; APT28 is deploying a novel PRISMEX malware leveraging steganography, COM hijacking and cloud abuse; multiple supply‑chain and repo poisoning campaigns (npm/PyPI/Go/Rust) and exposed AI platforms (Flowise, ComfyUI) are being actively exploited for RCE and cryptomining; Fortinet and Docker disclosed serious authorization/privilege‑escalation/EMS