ThreatsDay Bulletin: Pre-Auth Chains, Android Rootkits, CloudTrail Evasion & 10 More Stories

ThreatsDay Bulletin: a concise roundup of multiple active and high-impact threats, including a pre-auth RCE chain in Progress ShareFile affecting ~30,000 internet-facing instances, unpatched ImageMagick zero-days enabling RCE on major Linux distributions and WordPress, a NoVoice Android rootkit distributed via 50+ apps with ~2.3M downloads, ongoing GhostSocks/Lumma and XLoader activity, a surge in open-source supply-chain malware advisories, and novel AWS CloudTrail evasion techniques — organizations should urgently prioritize patching, remove malicious apps, monitor for related indicators, and harden logging/forensics.