ThreatsDay Bulletin: Edge Plaintext Passwords, ICS 0-Days, Patch-or-Die Alerts and 25+ New Stories

A security bulletin detailing threats where traditional attack vectors remain effective and automation accelerates industry-wide.

• •MicroStealer credential theft targets education and telecom sectors, stealing credentials and wallets via Discord webhooks
• •FTC settles with location data broker Kochava to prevent illegal selling of consumer geolocation and income data
• •Proton Mail implements post-quantum encryption as optional feature to protect emails against future cryptographic threats
• •pnpm 11 adds 24-hour minimum release age for new packages and blocks exotic dependencies to prevent supply chain compromise
• •Critical Eclipse BaSyx vulnerabilities (CVE-2026-7411, CVE-2026-7412) enable code execution and network segmentation bypass