Operation Endgame dismantles CastleRAT, Gootloader and StealC networks
Authorities seized 235 servers and 257 domains and identified credentials for 6.4 million victims.
Authorities seized 235 servers and 257 domains and identified credentials for 6.4 million victims.
Sophos found scanning and failed attempts, not a confirmed compromise; PHP fixed the flaws on October 21.
Fixes are PHP 8.2.35, 8.3.36, 8.4.27, and 8.5.12; PHP 8.1 and earlier get no official patches.
Many European sites are back and Albert Heijn home delivery is expected by Friday; no data theft is confirmed.
Stores stayed open; investigators have not found stolen customer, associate or partner data.
Stores stayed open, and the company says investigators have found no evidence of stolen sensitive data.
CISA added two actively exploited Citrix NetScaler zero-days to the KEV catalog.
Citrix confirmed exploited NetScaler zero-days CVE-2026-88771 and CVE-2026-88772 allow unauthenticated remote code execution.
Check Point issued emergency hotfixes for actively exploited critical path traversal CVE-2026-93616 in Security Management Server.
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.
Today 1.2K readers · 1.4K views · 289 reads · all time 195K views