ThreatsDay: 296K IoT Botnet, 100+ Water Systems Targeted, SharePoint RCE Chain + 27 New Stories

ThreatsDay weekly roundup describing a broad set of active cyber threats and incidents: social-engineering and SSO phishing, numerous malware families (stealers, RATs, loaders, backdoors), large botnets (including IoT compromises and AI-assisted P2P botnets), blockchain- and cloud-backed C2 techniques, supply-chain MCP poisoning, unpatched boot‑chain and SharePoint vulnerabilities under active probing, and campaigns targeting critical infrastructure and mobile devices. The bulletin highlights emerging TTPs (live operator phishing, AES-CTR WebSocket exfiltration, EtherHiding, environment scoring to evade sandboxes) and documents active exploitation or high-impact risks across multiple sectors.