ThreatsDay Bulletin: DNS Poisoning Flaw, Supply-Chain Heist, Rust Malware Trick and New RATs Rising

ThreatsDay’s latest briefing shows the threat landscape tightening, with a critical flaw in BIND 9—CVE-2025-40778—affecting thousands of DNS servers. As many as 5,912 instances have been found vulnerable, with a CVSS score of 8.6, enabling an off-path attacker to inject forged address data into the resolver cache and redirect downstream clients to attacker‑controlled infrastructure without triggering fresh lookups, according to Censys.

The advisory also notes a publicly available PoC exploit and urges updates to BIND 9 versions 9.18.41, 9.20.15, and 9.21.14, along with restricting recursion to trusted clients, enabling DNSSEC validation, and monitoring caches. The roundup emphasises how such cache‑poisoning flaws add to blind spots as attacks scale in breadth and impact, underscoring the need for proactive monitoring and rapid patching.

Other entries in this week’s ThreatsDay cover wider trends, from supply‑chain compromises to new modular tools priced for low‑skill actors, illustrating that defenders must stay vigilant across multiple fronts.