ThreatsDay Bulletin: AI Prompt RCE, Claude 0-Click, RenEngine Loader, Auto 0-Days & 25+ Stories

Weekly ThreatsDay Bulletin summarizing a broad set of active and emerging cyber threats: high‑severity vulnerabilities and PoCs (Notepad Markdown RCE CVE-2026-20841; Claude DXT zero‑click RCE CVSS 10.0), multiple information stealers and loaders (LTX, Marco, GuLoader, RenEngine, Foxveil), data‑theft oriented ransomware groups (Coinbase Cartel, World Leaks, PEAR), APT pressure in the Asia‑Pacific (notably Taiwan), abuse of legitimate admin/monitoring tooling and cloud/trusted services for command-and-control and distribution, plus supply‑chain and social engineering campaigns — defenders should prioritize patching, monitoring for misuse of trusted tools, and network/evidence collection for active malware indicators.