ThreatsDay Bulletin: FortiGate RaaS, Citrix Exploits, MCP Abuse, LiveChat Phish & More

## Executive summary This ThreatsDay bulletin enumerates numerous active and emerging cyber threats: a Ransomware-as-a-Service group exploiting a FortiGate authentication bypass at scale, pre-auth RCE chain in BMC FootPrints, new C2 framework (SnappyClient) delivered via Hijack Loader, deep-link CursorJack abuse, mass exploitation attempts against Citrix, Teams-based remote-access phishing, ClickFix and LiveChat phishing campaigns, updated stealers distributed through pirated-game sites, APT espionage expansion (RagaSerpent), and large-scale secrets and app-supply risks — collectively indicating elevated, multi-vector risk to enterprises worldwide.