ThreatsDay: 296K IoT Botnet, 100+ Water Systems Targeted, SharePoint RCE Chain + 27 New Stories

ReliaQuest faced a social engineering attack involving a fake login page and impersonation, leading to brief view-only access to their identity dashboard. Attackers used lookalike domains and MFA push abuse, aligning with ShinyHunters tactics. Additionally, fake productivity apps containing malware are being distributed via deceptive websites.