ThreatsDay: 200 Android Flaws, Browser-Built Phishing, 119K Scam Shops + 23 More Stories

This ThreatsDay Bulletin compiles numerous active security incidents and trends: malicious browser extensions and npm packages stealing wallet and credential data; AI-driven intrusion frameworks and web shells exploiting vulnerabilities (Log4Shell, Spring4Shell, Shellshock, etc.); large-scale phishing, PhaaS campaigns that bypass MFA, and fraud tied to fake M&A and SIM/Singpass abuse; campaigns distributing infostealers and remote access tools that later lead to data exfiltration and ransomware; plus supply-chain and privacy concerns across consumer devices and cloud/email providers.