ThreatsDay Bulletin: Defender 0-Day, SonicWall Brute-Force, 17-Year-Old Excel RCE and 15 More Stories

**Weekly cybersecurity roundup:** The report summarizes numerous active threats and research: a targeted AI-enabled social-engineering wallet breach (UNC1069) stealing ~$100K from internal hot wallets; Microsoft Defender and other Defender-related zero-days/privilege-escalation exploits; CISA adding an old Excel RCE (CVE-2009-0238) to KEV; a WordPress plugin supply-chain backdoor affecting ~180k installs; a fake Ledger app on the Mac App Store that drained $9.5M from ~50 victims; APT41 deploying an undetectable ELF cloud credential harvester across multiple cloud providers; malvertising and SmokedHam campaigns leading to Qilin ransomware; and localized JanaWare ransomware attacks in Turkey—overall advising patching, dependency review, and stricter app scrutiny.