ThreatsDay Bulletin: PQC Push, AI Vuln Hunting, Pirated Traps, Phishing Kits & 20 More Stories

This weekly ThreatsDay bulletin surveys a wide range of active cyber threats and trends: PQC migration planning, AI-assisted vulnerability detection, APT-led backdoor campaigns via pirated installers, browser-extension crypto drainers, a global Android firmware backdoor (Keenadu), resilient phishing-as-a-service operations (Tycoon2FA), RMM-based remote access from fake meeting invites, fileless infostealers and supply-chain compromises (Polyfill), malicious npm typosquats exfiltrating crypto keys, and a host of fraud and infrastructure abuse like cloud phones and large numbers of end-of-life IIS servers — overall tracking numerous active campaigns, TTPs, and high-impact malware across diverse targets and regions.