Weekly threat recap: device-code phishing, Linux botnets, and supply chain attacks

A weekly threat roundup highlights how attackers are increasingly exploiting everyday friction points instead of relying on zero-day vulnerabilities. Device-code phishing tricks targets into entering codes on attacker-controlled apps, granting session access without stealing passwords. Linux DDoS botnets are spreading through misconfigured Docker sockets, SSH services, and vulnerable package managers, including GitLab flaws. Malicious or compromised browser extensions are also being used to steal OAuth tokens, API keys, and session cookies. The analysis notes that attackers often chain multiple techniques together to gain infrastructure access and persistence.