ThreatsDay: Cloud Bucket Hijacking, Windows LPE Chain, Global Fraud Bust + 17 More Stories

Weekly ThreatsDay roundup documenting a broad set of active threats and high-risk issues: a global fraud takedown, typosquatting SDKs stealing secrets, a stealthy Process Parameter Poisoning code-injection technique, an unauthenticated ArcGIS file-access vulnerability (CVE-2026-9181), overlaps between ransomware toolkits (Interlock/Hive0163 and TAG-124), kernel driver DMA/privilege bugs, social-engineering campaigns leveraging Microsoft Teams and Meta, cloud bucket hijacking/exfiltration risks, and multiple malware/RAT campaigns targeting enterprises. Organizations are advised to prioritize patching, tighten cloud egress and bucket ownership controls, monitor for the listed IOCs and suspicious remote-access activity, and review user/credential and remote-support processes.