ThreatsDay Bulletin: OpenSSL RCE, Foxit 0-Days, Copilot Leak, AI Password Flaws & 20+ Stories

This bulletin aggregates active cyber threats and research across 25+ notable items: cross-platform ransomware and RaaS enhancements (LockBit 5.0), multiple ClickFix social-engineering campaigns delivering loaders, RATs and infostealers (Matanbuchus, AstarionRAT, Cuckoo Stealer), large-scale exploitation of Ivanti EPMM vulnerabilities and GitLab SSRF (CISA KEV), a surge in RMM tool abuse, targeted phishing campaigns (Operation DoppelBrand), and critical library and PDF-engine vulnerabilities; it highlights active exploitation, supply-chain/cloud misconfigurations, and evolving attacker TTPs with implications for enterprise and industrial networks.