ThreatsDay Bulletin: Smart TV Proxyware, 24-Year curl Bug, AI Crime Forums + 13 More Stories

This ThreatsDay roundup highlights a range of active security issues: critical and long-lived vulnerabilities (curl flaws, a CVSS 10.0 Hoppscotch takeover), multiple active malware and phishing campaigns (Edgecution Edge extension, ClickFix/AMOS infostealer, Browser-in-the-Browser kits), large-scale exposures and espionage using exposed REDCap instances, credential misuse leading to Salesforce data theft, and growing convergence between criminal ransomware tooling and nation-state activity — with practical remediation advice to patch, revoke forgotten credentials, and audit unmanaged devices.