ThreatsDay Bulletin: SMS Blaster Busts, OpenEMR Flaws, 600K Roblox Hacks and 25 More Stories

This report is a concise roundup of multiple active cybersecurity incidents: authorities busted SMS blasters and criminal networks while researchers and vendors disclosed supply-chain compromises (malicious npm and PyPI packages via CI abuse), critical vulnerabilities in widely used software (OpenEMR, PhantomRPC, Qinglong), massive internet exposure of RDP/VNC servers, and the rise of infostealers and malware (Vidar, npm/WebSocket stealers). It also documents influence operations, large-scale credential leaks, tool abuse in intrusions (Komari, Trivy/Checkmarx repo access), and notable prosecutions and regulatory actions, highlighting a broad, high-impact threat landscape across supply chains, infrastructure, and end users.