ThreatsDay: 296K IoT Botnet, 100+ Water Systems Targeted, SharePoint RCE Chain + 27 New Stories

This week’s ThreatsDay bulletin highlights a diverse range of cyber threats, including a 296,000-device IoT botnet, social engineering attacks targeting security teams, and a growing number of credential-stealing malware families. Notable threats include a fake login page and productivity app used for phishing, a Python-based stealer targeting credentials and wallets, and a new C++ botnet loader leveraging the Polygon blockchain. Several zero-day vulnerabilities are also being reported, including one in HP ThinPro that bypasses TPM full-disk encryption. The overall trend indicates an increasing sophistication and volume of attacks, with a focus on exploiting trust and leveraging new technologies like AI.