This week’s ThreatsDay covers supply chain attacks, fake help desks, wiper malware, AI prompt traps, RMM abuse, phishing kits ...
CVE-2026-33626 exploited within 13 hours of disclosure, enabling SSRF-based cloud credential theft and internal scanning.
Missing best practices in SSL/TLS configuration. xmlrpc.php with no admin page exposed to the Internet. No automated fuzzing of forms or web scraping type of activities. Any activity that could lead ...