One-two punch delivered in global operation disrupts cybercrime "assembly line"

Ars Technica's security feed describes a wave of high-impact incidents and policy moves: a global law‑enforcement operation dubbed “Operation Endgame” disrupted widely used cybercrime tooling; multiple high‑severity vulnerabilities and zero‑days were disclosed or patched (PeopleSoft, a Linux kernel use‑after‑free, Beats Studio Buds eavesdropping, and a critical Copilot/SearchLeak issue that exposed 2FA codes); Microsoft and others uncovered self‑propagating malware and credential stealers (including a USB‑spreading Crypto Clipper communicating over Tor and malicious Microsoft packages); a huge