Security researchers have identified two significant cyber threats that highlight the growing sophistication of modern attacks. In the first campaign, the Head Mare threat group targeted unpatched TrueConf video conferencing servers used across multiple industries. They exploited security vulnerabilities to gain full system control, install hidden web shells, and distribute the PhantomCore backdoor through tampered software installers. Attackers were able to steal credentials, collect network information, and maintain long-term access using stealth techniques. Including reverse SSH tunnels and malware such as PhantomGraph, which leverages Microsoft OneDrive for covert communications. In a separate supply chain attack, nearly 800 malicious packages were uploaded to the npm registry. They targeted developers who unknowingly install them into projects. These packages deliver malware capable of stealing sensitive data, establishing persistence, and providing remote access across Windows, macOS, and Linux systems. The campaign also used deceptive coding practices to evade detection during security reviews. Together, these incidents underscore the increasing risks posed by unpatched systems and compromised software dependencies. Thus, reinforcing the need for timely patching, strict package validation, dependency monitoring, and stronger software supply chain security controls. CTIX analysts will continue to report on the latest malware strains and attack methodologies.