ThreatsDay Bulletin: AI Agents Gone Wrong, Sketchy C2 Tools, ClickFix Tricks, JS Backdoors & 20+ New Stories

This bulletin covers major cybersecurity threats and attack techniques from 2025-2026.

• •Cisco Unified Communications Manager (CVE-2026-20230) SSRF vulnerability enabling root elevation attacks
• •Russian officials targeted by mobile spyware for data exfiltration and surveillance
• •VIP Keylogger distributed through JavaScript and batch script loaders via social engineering
• •DriveSurge malware network using ClickFix and FakeUpdates techniques on thousands of compromised sites
• •JavaScript backdoor campaigns targeting energy and finance ministries for email account compromise
• •Nation-state actors exploiting ROADtools framework for cloud attack discovery and defense evasion