ThreatsDay Bulletin: Pixel Zero-Click, Redis RCE, China C2s, RAT Ads, Crypto Scams & 15+ Stories

ThreatsDay Bulletin notes that this week’s threats largely exploited familiar systems rather than novel tricks, with attackers aiming for scale, patience and misused trust.

In a highlight for zero-click security, Google Project Zero detailed a Pixel 9 zero-click exploit chain that hijacks Android devices via the Dolby audio decoder, leveraging CVE-2025-54957 and CVE-2025-36934 to gain code execution and escalate privileges, with patches rolled out by Dolby in October 2025 and Pixel devices receiving fixes on 5 January 2026 and 6 January 2026 for the BigWave driver, respectively, according to Project Zero.

The roundup also covers a broad spectrum of campaigns, from DoS activity targeting UK services to DLL side-loading by a trusted app, malvertising that drops remote access trojans, and supply-chain and crypto scam trends spanning 18,000 C2 servers in China’s space to prolific phishing and impersonation schemes. Taken together, the piece argues the front line has quietly moved into everyday software and online services, where exposure accumulates and then surfaces in one sweeping, interconnected pattern. The threats illustrate the value of monitoring trusted workflows and keeping common software components patched to reduce risk.