ThreatsDay: 296K IoT Devices, 100+ Water Systems, SharePoint RCE Chain and 27 More Stories
The weekly roundup describes multiple separate cybersecurity threats and incidents. It covers fake login pages and social engineering, trojanized productivity applications, a live operator-driven phishing framework, Android banking-fraud malware, a ransomware-related backdoor, the Dysphoria botnet compromising nearly 296,000 IoT devices, blockchain-based command and control, AI use in botnet workflows, and multiple stealers and remote-access trojans. It also describes an unpatched boot-chain zero-day in HP ThinPro 8 and 9 and mobile-attack statistics for Q2 2026. The page title also refers to more than 100 targeted water systems and a SharePoint RCE chain, but the extracted text provides no further details about them.
CERT24