ThreatsDay Bulletin: 0-Days, LinkedIn Spies, Crypto Crimes, IoT Flaws and New Malware Waves

ThreatsDay Bulletin highlights a busy week in cyber threats, from espionage warnings to software flaws and crypto crimes. According to MI5, Chinese spies are actively using LinkedIn to recruit and cultivate lawmakers, reaching out at scale via headhunters or cover companies to gather political intel. The EU also unveiled a digital omnibus package proposing major GDPR and AI Act changes aimed at simplifying data rules and cookie consent, while critics warn it could lessen protections.

The bulletin also notes attackers weaponising browser extensions to siphon data, with several malicious VPN and ad-blocking add-ons installed around 31,000 times. In other developments, a California man pleaded guilty to laundering at least $25 million tied to a $230 million crypto scam, part of a wider social engineering scheme.

Additionally, a critical pre-authentication RCE in Oracle Fusion Middleware Identity Manager (CVE-2025-61757, CVSS 9.8) was disclosed, and a separate flaw in the Shelly Pro 4PM smart relay (CVE-2025-11243, CVSS 8.3) could trigger device reboots.