CAI cloud worm gives competitors' malware the boot, then steals secrets and mines for coin

The Register digest describes a surge of active, high-impact cyber threats and disclosures: a CAI cloud worm that evicts competitor malware while stealing secrets and crypto-mining; credential-theft and social‑engineering campaigns (Microsoft Teams bait delivering EtherRAT); new phishing/ device‑code kits (EvilTokens); and AI‑enabled abuse including agentic ransomware and prompt‑injection. Multiple major breaches and data exposures were reported (ShinyHunters leaks affecting Moody Bible Institute and possibly Medtronic, AdaptHealth breach via a third‑party), alongside botnet disruption efforts