This ThreatsDay roundup covers multiple high-impact cybersecurity threats including a 296,000-device IoT botnet, attacks targeting over 100 water systems, and a SharePoint remote code execution chain. Additional stories highlight AI-assisted botnets, command-and-control traffic concealed within public infrastructure, delayed-activation malicious tools, and shrinking exploit windows. Social engineering tactics such as fake login pages, fake security scans, and fake productivity apps continue to be effective entry vectors. The article aggregates 27 additional stories covering a broad range of threats across sectors. It reflects an increasingly complex threat landscape where attackers blend sophistication with simple deception techniques.
