ThreatsDay Bulletin: Hybrid P2P Botnet, 13-Year-Old Apache RCE and 18 More Stories

Weekly cybersecurity roundup highlighting a broad set of active threats and vulnerabilities: a hybrid Phorpiex/Trik botnet distributing clippers, spam, and ransomware; a chained RCE in Apache ActiveMQ (CVE-2026-34197) enabling unauthenticated execution in some versions; widespread malware and stealer campaigns leveraging trusted platforms (e.g., GitHub Releases, PyPI, SaaS notification pipelines); exposed industrial PLCs targeted by nation-state actors; and escalating AI-driven attack techniques including prompt-injection, AI-assisted DDoS, and stealth data exfiltration via AI features.